E.g. under GDPR (yes, I know that law likely doesn't apply to this), you need to have a legitimate interest or consent to collect/retain personal information. Y

E.g. under GDPR (yes, I know that law likely doesn't apply to this), you need to have a legitimate interest or consent to collect/retain personal information. You don't have to instantly scrub it from your storage, but this 180 day rule would force you to delete it shortly after the 180 days are up, probably within a couple weeks.