Whaaaa...
Oh, you are right. I feel so much better about the non-compliance now that I use comfortable numbers like 10 and 20. Last I checked 10 yrs was a decade; soft selling it only downplays it and gives it no urgency.
How do you reconcile statements like "I for one believe that changes in next 5 years will cause all of us reason to worry for civil liberties and strict compliance." and "Let them take their time" If not pushed do you really ever think they would get there?
Do you think the government took the same "please be sarbanes compliant" when you are ready to the private sector? HIPAA? The FBI looses computers and weapons and has no idea how, Indian Affairs data security was so bad it was transfer to the court to over see it. Vetern Affairs loses millions of names, ss#, etc...yes, we should let them be in compliance when they are ready. I feel so much more secure with the information they collect and maintain with my head under the pillow.
I would think that if you are worried about the changes in the next 5 yrs and civil liberties you would be beating on them to get with the program NOW, to better adapt to the changes over the next 5 yrs.