Privacy-preserving designs prove compliance without revealing data, yet regulators cling to outdated visibility logic.