Except as required by law, users of CDL systems and services are informed whenever personally identifiable information other than transactional information will be collected and stored automatically by the system or service.</li> <li> <strong>Retention.</strong> The CDL retains personally identifiable information only so long as it is required for operational purposes. Where possible PII is discarded or anonymized within 60 days of collection.</li> <li> <strong>