“data will be held for two years” according to another article,
which also says that, during the trial, MAC addresses were being hashed (with the obvious privacy weakness) but with the full roll-out MAC addresses are now “tokenised”, whatever that exactly means.
I wonder how MAC address randomization figures in all this. However if it were me, I would be using the HKS!