Data is kept manageable within each portable application by deleting any recorded DUID and its associated encounter integral ten days after the encounter, unless that DUID is found on a public noticeboard within that time.
This algorithm makes least demand upon the device when the proportion of suspected and positive DUIDs is small. But when they’re large, track and trace is pointless anyway and lockdown is called for.