Soo the strongest form of privacy protection isn't better storage or better policies, it's simply not creating the data in the first place