They may not have power to push back on KPIs, but even just sticking to regulatory compliance would be good enough. Nobody in management will say in writing tha

They may not have power to push back on KPIs, but even just sticking to regulatory compliance would be good enough. Nobody in management will say in writing that marketing should ignore GDPR, for example. And that means that if you, say, introduce a new category, everyone is supposed to be unsubscribed by default. So non-compliance is always a choice.