Lack of direction when it comes to regulatory compliance of the protection of data can be consequential and wide-ranging. For business, it can be downright detrimental. According to IBM's Annual Cost of a Data Breach Report for 2022 released over the summer, it also continues to be quite costly. This is especially true when it comes to delaying regulatory compliance management for data protection and cybersecurity. Every experienced attorney practicing in the area of data privacy and cybersecurity law knows that discussions with corporate decision makers about compliance directly cross at some point with estimates of data breach costs post-cyber event and calculated costs associated with fortifying against any such event in the first place. It is a double-edged sword that can favor positive effects over negative ones if done right. Much like an iceberg floating above the surface, though, putting off a company's cyber assessment of its compliance obligations will likely foretell some rough spots ahead that are characteristically unpredictable in both depth and scope.