In a previous report of ours on the Privacy Act, we recommended a standard of collection and retention of personal information based on necessity and with proportionality. That may be a very large question for you to answer in the limited time I have, but I would appreciate a more fulsome answer—in writing if you don't have a full answer now. Is that a problem in your view? If so, why? And if it isn't a problem, then that makes my life a lot easier.
On February 19th, 2019. See this statement in context.