[toomuchtodo]

It’s substantially better than no governance and oversight, and additional reporting of deviations can be mandated (require documentation of what ongoing investigations data retention extension requests are tied to).

You have to start somewhere.