That’s why I created Privacy by Design — to complement regulatory compliance, which is never enough. Embedding privacy/security proactively into the design of one’s operations, to prevent the harms from arising, is the most ethical way forward.