Now it all gets deleted as per your data retention policy. To be fair the bulk anonymising for statistical purposes that your LMS does is probably not that safe. But it is completely unethical and unprofessional not to make a decent attempt at protecting your clients.
I’d worry a lot less about libraries than pretty much any other institution or service collecting your data.
