Certainly, I have no knowledge of how that would compromise systems and make people more vulnerable to criminals. My understanding of the metadata that we're looking to retain for a year is that it's very specific as it relates to date, time, duration and origin of transmission. It is not content like emails or browser histories or social media activities. Even for that basic metadata, for the bare minimum that could assist in complex investigations, we would still require judicial authorization.
From a police perspective, I do believe it is a reasonable time frame.