Telemetry privacy
The data that makes investigation possible is also a detailed record of what people did all day.
Process execution, websites visited, files opened, locations, timings. It is collected for security and it is a surveillance dataset by any reasonable description. That makes access control, retention and purpose limitation around security telemetry a genuine obligation, not an inconvenience, and security teams are not automatically exempt.
Checked against the primary source.