For a corporation, "avoiding doing it again" means dedicating resources to preventing a repeat of that type of "mistake": audits, privacy reviews, etc.

The choice not to dedicate those resources up front was an intentional one.