Given that both organizations treat complying with legal and contractual obligations as a risk management exercise, I see no problem with their employees doing

Given that both organizations treat complying with legal and contractual obligations as a risk management exercise, I see no problem with their employees doing the same. It sounds like the subject of the story did the analysis, determined that the potential downsides aren't really that bad (for him/her/them), and acted accordingly. If it's even true at all.