On: A GitHub repository was public-viewable

[oauea]

That depends entirely on what they're logging and why.

[layer8 → oauea]

There are always time limits that apply, which means you need to have a process to delete the relevant log entries (or the whole log) eventually.

[oauea → layer8]

Sure, like 7 years. https://business.gov.nl/regulation/keeping-business-records/