Many companies capture and store packets for network and application performance troubleshooting, as well as to learn the who, what and when of an attack or breach.
However, capturing and storing copies of traffic can also mean keeping copies of Personally Identifiable Information (PII), credit card numbers, and other such information that could result with a breach of industry compliance, such as GDPR and PCI DSS.