Monitoring the efficacy of privacy programs has taken on new importance with the advent of the GDPR, the CCPA and other comprehensive data privacy regimes. In this article, we present advice from privacy heads at eBay and PayPal and a partner at Bird & Bird on how organizations can develop and use key performance indicators to improve their data privacy programs, with examples from their experience using these indicators to track complaints, subject access requests, impact assessments and more. See also “How Uber, eBay and Pitney Bowes Built Principles-Based Global Privacy Program” (Oct. 16, 2019).