Principles and risk-based regulation - Role of PII in risk management