[nightcracker]

That's not legal, because that is still personal information being stored. They have to delete it all, upon request.

[JoshTriplett]

The implication (whether true or false) is that some company might treat the absence of a record in their database as suspicious.