The difference is the intention. A corporation maybe tracking. The same data, once given to the governance surveillance teams, is then used to surveil. Same info and mechanisms.