Yup, people should follow the "rules" even if they don't actually apply to them. Confidential personal information should be kept confidential short of a legal

Yup, people should follow the "rules" even if they don't actually apply to them. Confidential personal information should be kept confidential short of a legal compulsion to divulge it. Over my decades in IT I've seen plenty of things by accident (and once, not-accident. A guy was getting a lot of gay "spam" and wanted me to stop it. I went along with the cover story, knowing perfectly well it was message digests from a forum he had to have signed up for.) None of it gets repeated other than anonymized.