Beyond legislation and technological design