if you have the means and the mandate...

if you have the means and the mandate to prevent a personal data breach and you still don't do it then you might be a security idiot...

(inspiration)