Risk data: Can it be both efficient and compliant?