Compliance vs innovation: striking a balance in quest for data security