The failure IMO is trusting anything that has not proven itself first with a year or three of experience.

US privacy laws - has anyone gone to jail or massive impacting fines for violations?