An enterprise information system needs to pay attention to privacy issues so that it does not accidentally leak out information. Note that privacy is not always about releasing customer information. For example, an HR component should require proper authentication before performance review information can be retrieved.