That is certainly a reason, Mr. Chair, to think hard about the amount of information that is retained and collected in the first place. There are concerns about the security of data any time it exists, and any time it exists for a long period of time. Any time more information is collected than is strictly necessary for the government activity at issue, that is a concern.
On October 24th, 2017. See this statement in context.