Any thoughts about what application and service developers can do to help (or at least, not hinder)? The applications I work on are fairly general-purpose but (i) some generate things like web swerver logs and other records that capture information about who did what, and (ii) our customers will certainly use them in ways that touch PD, some of it very sensitive, and not necessarily in ways we predict.