Passing a law that damages privacy is a negative. Complying with the law is an imperative. So mitigating harm from the law seems like a positive.