In my experience there are much more stringent control over logging. Tokenization is the default for anything related to PII or customer data. Log retention rar

In my experience there are much more stringent control over logging. Tokenization is the default for anything related to PII or customer data. Log retention rarely goes over 30 days. Data residency is now in the conversation when talking about storage. Maybe smaller companies can fly under the radar, but any larger companies with auditing and compliance controls take it seriously.