Working with a lot of clients on building their data infrastrucutre I found that many of them were not tracking events correctly and storing them. However, the biggest challange we faced was that no one could tell us if it's in GDPR/CCPA complaince.