> Why would having a copy of the employee directory be a bigger problem? In jurisdictions where people have the right to be forgotten, they could ask for all t

> Why would having a copy of the employee directory be a bigger problem? In jurisdictions where people have the right to be forgotten, they could ask for all their information to be erased. How would that work if you keep a copy of the employee directory? That is one example. Another example would be a proposed bill in my jurisdiction which will force employers to disclose all information it stores about employees at the request of any employee. This will make you (someone who has a copy of the employee directory) some sort of data processor, which comes with new requirements about how you store that data and for how long. As someone else said somewhere in this thread, if you can see information, this does not automatically mean that you can store it.