A newly appointed privacy leader at a mid-sized financial services firm finds that privacy initiatives repeatedly stall because business units decline to fund or prioritize them, and there is no consistent mandate across departments. The privacy leader wants to establish durable authority for the privacy program. Which action would MOST effectively address the root cause of these stalled initiatives?