Security recordings fall into the category if legitimate need, and have to be deleted after a short while.
How is that enforced?
How is that enforced?