That's my question as well. What level of logging is acceptable?

1. httpd access logs and mail syslog messages
2. Source addresses to destination 80/tcp and 25/tcp
3. IP headers that hit a mail or web server
4. Full packet captures for all daemons
5. Full packet captures of all traffic

This is not very well thought out. There are so many ways to proxy, encapsulate and encrypt traffic, logs would be useless.

In San Francisco, 75k is not a very comfortable salary.

So, you don't want anything posted on places like Facebook, showing a list of your friends along with articles you have written, journal entries, ties to items you have posted about, etc. But, you have no problem with the same on Slashdot?

Four friends listed
A page filled with your posts to submitted articles
Three journal entries
Three fans

I know some people on Facebook that maintain some privacy: one never fills in all the fields or puts in erroneous information, one puts her middle name as her last name and posts an avatar instead of a photo.