If they violated their own policy, sure. But not every disclosure of customer information is prohibited by policy. The policy should be clear as to what the hol

If they violated their own policy, sure. But not every disclosure of customer information is prohibited by policy. The policy should be clear as to what the holder may do and what they won't.