The ideal approach is to acquire data from a bank and de-identify it to avoid personally identifiable information issues.

“Um, now doing that, the optimal thing to do ideally would be you go acquire data from a bank, and you de-identify everything, so you-- there's no, you know, PII issues or anything like that.”