Taming generative AI: Why it must be governed first — and differently IAPP