Where this one gets misread
Governance questions get answered with a policy document. The operational answers are configuration, not policy. Who may see what, how long it is kept and what happens on deletion can all contradict the written policy without anyone noticing.