Thats basically what they described isn't it? This compliance export feature is the only thing that allows reading private messages, and it is disabled by defau

Thats basically what they described isn't it? This compliance export feature is the only thing that allows reading private messages, and it is disabled by default and requires significant hoop-jumping to enable. So for most companies the original privacy policy will apply effectively.