> The bill provides other exceptions under which a provider may use, disclose, sell or permit access to customer personal information.

There's probably a "as necessary to provide the service" exception more than large enough to encompass internal logging.