At times enterprises may resist periodic reviews of big data strategies and security policies and procedures because top management believes that the current practice is “sufficient” and is reluctant to spend more if it is not “necessary.” This philosophy, however, is inaccurate. Security and privacy play an increasingly important role in big data, and all stakeholders should be aware of the implications of storing and cross-analyzing large amounts of sensitive, disparate data. Furthermore, it is imperative to understand that some data should be considered “toxic” in the sense that loss of control over these data could be damaging to the enterprise. Examples of potentially “toxic” data are: