This discussion has propelled us internally to completely review all our networking infrastructure, both of us and for our customers. We will definitely be letting everyone one know when we feel 'compliant' for privacy, and where we can't be, and allow for users to opt-out or permanently delete any history we may keep. I think it's been great for us to make this happen and I hope other businesses also look to this as an opportunity.

On that note - it should also be an opportunity for any experts here who do security reviews to get some exposure.