Considerations about how companies, governments and individuals interact with, build upon, and learn from aggregate data are increasingly important in policy and regulatory discussions. We help educate companies and governments on how data are and should be collected, used, and protected. At the same time, we encourage lawmakers to create policies that do not hinder efforts to harness the potential of experimenting with data. A new round of cybersecurity policies, crafted with broad industry participation, can propel the U.S. to global leadership in commercial incentive and cybersecurity regulation.