What is preventing the use of personal data for evidence based policy? Drawing on rapidly evolving commercial best practice, what practical steps can be taken to overcome these obstacles? How can data science support policy?