I don't think "less restricted" is a good framing. How you are using it is the core, and you get to collect and store what's necessary for your legal uses, and use it for those uses. You don't get to have access logs because there is no restriction on logging IPs, you get them because you argue a justified use of them, and thus you can have them to use them for it (and not for anything else).

I know what you mean but read this in context. You're less restricted in what you can collect compared to what you can do with it - any valid use case requiring video footage allows you to get video footage but that doesn't mean you can then do anything you want with it. The key is what are you using the data for.

And less restricted does not mean no restriction.