Some consulting firms say that one of the biggest problems facing companies trying to comply with privacy rules such as HIPAA and GDPR are disorganized desks. This can present a huge liability when it comes to customer information and the risk of data theft.