Is maintaining regulatory compliance enough? Experts recommend going beyond the basics of compliance and implementing data security best practices.