Slavik, ok in my experience with compliance ( which i have done for several years - including HIPPA, SOX, other local and industry specific articles ).
1) nothing EVER works as intended.
2) policies are written by lawyers without involvement of industry experts
3) nothing good ever happened from a stupid reactive policy.
Now, regulations and policies are a good thing WHEN DONE RIGHT.
In order to do them right you have to involve industry experts (NOT LOBBYISTS AND LAWYERS ) and they should be forward looking - not reactive.
That's just my opinion of course
