> There are just more regulations to comply with before a release.
If you do collect personal data and do funky stuff with it.
Another approach would be to not collect that personal data until you have the right process in place, and basically be regulation-compatible out-of-the-door on day one.
