← everything
Privacy or data
What they kept, and who they gave it to.
Data collected that nobody agreed to, retained after deletion was requested, shared with parties nobody was told about, or lost. Also the other side of it: subject access requests ignored, and deletion that turns out to mean hidden.