every company now: give us all your data (we have no security policy and are required by law to be unethical)