Right but iirc it's when you're already part of an investigation where your data is relevant? You message here makes it sound like it could be part of security routines?