from the report: "While the Order did not explicitly request that the Companies report all the types of Personal Information collected.." Why wouldn't they ask for all the personal information that they collect? Can anyone explain this?