“We followed the law, we follow our policies, we self-report, we identify problems, we fix them. And I think we do a great job, and we do, I think, more to protect people's civil liberties and privacy than they'll ever know.”