Executives and boards need to start taking privacy seriously before their businesses' reputations are damaged and restrictive laws enacted.