As I've said in response to previous questions, I think self-regulation can be a good intermediate step because of how quickly it can be put in place. Companies can work in coordination to establish certain standards. That's the upside of self-regulation.
However, there are going to be bad actors, and there will be something of an incentive to cut corners if we don't have mandatory rules that are the same across the board.