To achieve the maximum benefits from data-driven innovation, policymakers must take into account the possibility that regulation could preclude economic and societal benefits. A proposed framework for policy discussions examines three main areas of policy interest: privacy and security, ownership and transfer, and infrastructure and data civics.