“Yes but it should be vetted daily and anything not reaching a concern threshold should be permanently deleted from their record in case there is ever a breach so personal communications are not at as much risk long term.”