> Give your engineers a mandate to collect everything and anything, but don't tell management and legal the details so there's plausible deniability when people

> Give your engineers a mandate to collect everything and anything, but don't tell management and legal the details so there's plausible deniability when people figure things out. I've seen exactly that, sitting in at depositions of corporate defendants' management and IT staff. Nobody seemed to know the "big picture". IT staff knew what data they were managing, and how it was handled, but had no idea how it was used. Management knew business logic, but had no clue how to interpret data that they'd given to plaintiffs.