Data-breach guidelines welcomed — by govt, at least