We found that privacy is a much less mature area in government, and there is less progress to report. Fewer agencies have addressed [privacy programs] as a priority ... the security programs [are] a bit more mature [and have been] addressed over a long period of time.