You do bring up a good point about data retention though: how long is this data going to be stored? Ideally it would be deleted automatically some time after the state of emergency is lifted. If there's no data retention policy, that would be disturbing.