A learning analytics team wants to publish aggregate engagement metrics. Which practice is appropriate?

1. Assume all event data is harmless because it is called telemetry
2. Minimize identifying data and review aggregation and disclosure risks
3. Preserve every personal field indefinitely without a business need
4. Publish raw learner credentials alongside telemetry for correlation