If that's the case, sounds like he should have never collected the data in the first place :) Data is a toxic asset, as Schneier explained in 2016 https://www.schneier.com/blog/archives/2016/03/data_is_a_tox...