She challenged the assumption that private firms face minimal exposure. “Sometimes it’s easy to just say, oh, well, who’s going to sue me? Well, you’re not thinking about your vendors, your competitors,” she said. “And once again, those regulatory inquiries that could come to you, even if you’re a private company.”