Commercial, Legal & Technical due Diligence
Call me cynical, but I can almost picture the scene:
Commercial 1: Will it make us a lot of money?
Legal 1: Will it make us a lot of money without being explicitly against the law?
Technical 1: How long do we think until a data breach?
Commercial 2: How much money will we have made by then?
Legal 2: How much would we get done for?
Technical 2: Are we just going through this process to make it look like we actually care about the customer when in fact it all comes down to how much money we can make out of it seeing as it's actually technically feasible?
*cough, shuffle*
I have to say I love how they claim that it's a new gold standard. Yes, it's better than previous iterations, but here better only means "not as bad". In a similar vein chocolate money wrappers are a new gold standard. And there's only a thin veneer separating them from something brown.