Data privacy is not only a cybersecurity problem. It is an operational design problem. Here is a practical framework for understanding how data flows through a growing business — and how to control it.