Audit logs do not record update events on customer records, only creations and deletions. Compliance requires a complete change history. Extending the audit log service to capture update operations will satisfy auditing requirements.