Organizations care about data privacy, but their priorities appear to be different from what their customers think are important.