Customer feedback data privacy is decided less by what the law says than by what your CX team does on autopilot — retention windows nobody set, verbatims nobody scanned, and AI processing nobody disclosed.