Another big reason not to keep this stuff is just the cost of dealing with requests from law enforcement. At some point you start getting them. If you don't h

Another big reason not to keep this stuff is just the cost of dealing with requests from law enforcement. At some point you start getting them. If you don't have any logs you can just always say the princess is in another castle, since you can't provide data that doesn't exist. If on the other hand you do have the requested information, you need to determine the validity of the request, and then extract the data; or refuse to comply and possibly put yourself at legal risk. For a smaller business that's probably a can of worms you'd rather avoid opening.