Curious that they don’t know what data they have, no? Collectors of data should know what they have and who they have shared it with. Think of holding data as

Curious that they don’t know what data they have, no? Collectors of data should know what they have and who they have shared it with. Think of holding data as risky, as if the data is toxic. Think of the monetary and reputational risk of a data breach. Incidentally, the data collected must be done so for a specific business purpose. And can even be kept if there are other requirements such as AML or KYC. Just slapping a zero over the data is not a viable solution.