Thinking as a regulator, if I came in and saw that you had the best policies in the world or the best technologiy in the world, but the relationship between that and what you actually do were divergent, that would cause me to grouse and get cranky."

Gerald Stegmaier, partner in Goodwin Procter’s privacy & data security and technology company practices.