> Want to store logs? Now you need to make sure you're scrubbing any type of personal information from the logs. What?! I'm not allowed to store my users name,

> Want to store logs? Now you need to make sure you're scrubbing any type of personal information from the logs. What?! I'm not allowed to store my users name, address and credit card number in my unencrypted syslogs anymore? HOW DARE THEY, THOSE DAMN BEUROCRATS! Seriously though, while there are problems (like IP address being considered personal information, which they really aren't), the general idea is very positive. You shouldn't be able to store just any information of a person that only gave you this data for a specific purpose. Servers do get hacked, employees do abuse their access to systems and old hardware doesn't always get disposed of properly. When I'm done using a service, I want my data gone from their servers ASAP, no buts.