Well right now it's a requirement of GDPR, which they claim to follow. No one has confirmed it so far, but they should. Employee having direct access would be a

Well right now it's a requirement of GDPR, which they claim to follow. No one has confirmed it so far, but they should. Employee having direct access would be a serious breach of security that has to be reported to authorities.