zlacker

Since there's quite a few people here working at US companies with access to lots of user data, but they may not have decision making capacity, I just thought I'll link the Simple Sabotage Field Manual, out of context and for no reason at all https://www.cia.gov/static/5c875f3ec660e092cf893f60b4a288df/...

If some data is shared with an external entity, it likely needs to be included in a few usual disclaimers, with at least a few meetings to clarify the exact wording and verification of the legal implications with the right dept and double check how it complies with others data protection rules, and don't forget the audit, and I think this contains a mistake so maybe let's investigate this issue first, and ...

>>virapt+(OP)
Might I suggest to instead reflect on why you are working in an industry that collects all this data.

>>accoun+jp
Money!

>>virapt+(OP)
Are you sure that not even the most mediocre insider threat program doesn’t have this accounted for? Especially when they’re an industry that knows itself well?

They will find out. And act accordingly. And your career will end, with the mess cleaned up and billable to you.

>>cmxch+7M
> Are you sure that not even the most mediocre insider threat program doesn’t have this accounted for?

I worked for a big corp. None of this is out of ordinary.

But yeah, if you need to survive and worry about being fired, you make your own decisions that you'll be able to live with.