This is exactly the sort of thing why im baffled that people are leaving for companies in countries with either little or literally no data privacy laws.

Sure andy is a dipshit. But at least he doesn't get a god damn say over how some things are done. Because the law sits out side his control.