For the past two decades, attention to privacy generally has focused on business or government. The nonprofit sector has faced little privacy scrutiny. Yet this sector has plenty of personal data and, based on my limited experience, plenty of bad or nonexistent privacy practices.