The battles are usually things like invasive user tracking, insecure storage of PII (comprehesive credit reports), locking people out of accounts without recour

The battles are usually things like invasive user tracking, insecure storage of PII (comprehesive credit reports), locking people out of accounts without recourse, dinging people's credit scores, giving out (potentially incorrect) information to police without warrants, etc. So, upper management, government agencies, finance departments, and marketing departments.