I'm definitely looking to transition to a more healthy environment, but so far every place I have visited has a similar terrible attitude to the practicalities of security and handling breaches. I have asked for clarification by legal sources many times, but this appears to be legal, with the obvious exception of the illegal things. Those are not legal but they don't have a governing body that actively punishes transgressions. It also appears to be widespread. Perhaps I just live in the wrong country :)