Organizations can balance security with privacy by anonymizing and pseudonymizing data used in testing, ensuring explicit consent from data subjects when necessary, and transparently communicating the testing process to stakeholders.