Risk control plays an important role at privacy protection. Article 17 (1) of the Directive 95/46/EC (DPD) requires that the controller must implement appropriate technical and organizational measures to protect personal data. ICT offers solutions in the shape of privacy protection for users, consumers and citizens. The application of ICT to protect privacy has become widely known under the name Privacy-Enhancing Technologies (PET or PETs). This chapter points out that a positive business case for the economic justification of investments in PETs is needed before a positive decision on the investment will be taken. The ROI and EPV calculation methods are useful tools for management assessing PET investments.