Successful programs for privacy and data protection governance consider the lifecycle of personal data and the risks and regulatory issues that arise at each stage, from collection to data retention or destruction.