The IT-enabled organisational transformation has been one of the widely studied topics since the introduction of IT in the business process of organisations, regardless of size and industry. Digital transformation, a relatively new but related phenomenon, has recently dominated the debates in the information systems (IS) research domain. Even though there is little disagreement in the role of new digital technologies in enabling innovation and providing a competitive advantage for organisations, researchers and practitioners have also voiced their concerns on the challenges associated with this technology-induced change. Among others, the volume of data collected and stored to make the digital transformation possible has brought the issue of security and privacy to the fore. A systematic literature review of recent studies was conducted to provide an overview of the developments on how organisations attempt to maintain privacy and security while undertaking digital transformation. The results suggest that the adoption of new technologies is contingent on the perception of different stakeholders on how privacy and security are maintained. Besides technical measures in place, organisational culture, organisational structure, HR practices, privacy and security policy, as well as senior leaders’ commitment and IT leadership skills are essential to maintain acceptable privacy and security measures that support digital transformation. Implications for research and practice, as well as opportunities for future research, are also presented.