Just because we can doesn’t mean we should.
Just because it is legal doesn’t make it right.
Sounds fairly simple doesn’t it? And maybe I should add, just because we can justify it, also doesn’t make it right. We can change our organisational policies to align with our desires, to give us backing, weight in discussions, to hide behind.
Being clear on the purpose and who’s it for is critical in both the design and execution of everything we do.
We see this all the time with data, more seems to be better and keeping in longer is also better and we justify it all with our policies. And yet, we conveniently ignore that the longer we keep data, the longer the data trail, the greater risk for harm and misuse.
What is the problem we are trying to solve again?