In theory, compliance and security can work together, but right now, compliance often means centralised data collection.