Sure. But I would love if they had considered this from the start:
>As a result we are currently developing new data retention and disclosure policies.
“I guess we don’t actually need that” should have been the idea from the start.
>As a result we are currently developing new data retention and disclosure policies.
“I guess we don’t actually need that” should have been the idea from the start.
I'd say they followed "I guess we don't actually need that" approach reasonably well so far and good for them if they want to improve that even more.
On top of all of that, it's volunteer run and has been understaffed for basically it's entire life, so sitting down and figuring out a proper data retention policy that takes a holistic view of everything we have just never bubbled up.
In general I think we already do a pretty good job of collecting a minimal amount of data, and hopefully with proper policies we can do an even better job.