> They can put explicit bounties for whistle blowing them and revealing privacy violations.
Employees blowing the whistle internally, or externally? If they want to encourage employees to blow the whistle externally, they could put a carve out for that in their NDA.