Firms are increasingly investing in how they protect consumer data and give consumers more control of their data, but this type of data privacy performance requires a delicate balance. The higher the performance of a firm on data privacy, the more it might be giving away opportunities to monetize the data it has collected. The lower the performance of a firm on data privacy, the more susceptible the firm is to risk from multiple harms (e.g., reputation scandals, litigation penalties). When it comes to data privacy, firms lose out if they tip too far in one direction of the other. So, what should leaders do?