Investing in technology can make a significant difference to the effectiveness of your privacy programme. Knowing what privacy technology is right for your organisation depends on several factors. These include the types of personal information your organisation collects, what is it used for, and where is it stored. Once these questions have been answered, you can consider what type of privacy technology will address any weaknesses in your current systems and help build your privacy framework. This article examines the criteria to assess what information you collect and process, along with a description of the three main privacy technology categories.