[bagels]

How were they not already auditing access to customer data?

[codebje]

They were not keeping it beyond the timeframe necessary for the model to process it, so there wasn't access there to audit.