Here's the real situation: Lawyers and big government, especially the second, have unlimited time, money, effort, and powers and nothing much else to do but cause trouble, and I just do not have the resources to defend myself against them. To them a false alarm is just another project at the office; to me their false alarm is likely the death of my business and a big torpedo below the water line of my little boat in life.
So, my 'tactic' is just to do nothing wrong, certainly have nothing wrong in my data, try to remain mostly anonymous, stay the heck below their radar, and keep my data inside my own four walls.
I can still be vulnerable to various false alarms. And if my business is at all successful, I may have to become something of a 'public person', that is, not so anonymous, and, then, be on the radar of various people who would like to cause me trouble. There could be news reporters looking to 'manufacture' a scandal for a 'scoop'. There could be politically motivated attackers. And there could be just common shakedown artists who want me to give them something and else trigger some false alarm to have big government cause me trouble. One false alarm could cost me my business, years of time, millions of dollars in legal fees, all for nothing substantive at all.
Just as for anyone, any of my data outside my four walls is just raw meat for lots of people who could do me harm. So, no 'cloud' servers; no 'cloud' file backup; little or nothing on Facebook, LinkedIn, Twitter, Google+; all blog posts anonymous; mostly don't let browsers accept cookies,; etc.
Let lawyers and big government go after easier targets. I remember the old joke that don't have to outrun the angry bear; instead, just have to outrun the poor other guy trying to outrun the angry bear.