Privacy is a fundamental human right articulated in human rights instruments. The right to privacy is also included in many other laws, conventions and charters. Privacy-related risk should be included in the risk-based internal audit planning process to ascertain whether it should be included in the plan.