Around here I'd expect something more like a 7 year minimum to be more likely... Limiting the timeframe does improve the costs and the privacy impact, but the

Around here I'd expect something more like a 7 year minimum to be more likely... Limiting the timeframe does improve the costs and the privacy impact, but the ISP will still need to build and run all of the logging infrastructure, and the end result is that you'll still be identifiable.