Every place I have worked in the past there have been zero pathway for IT/Developers to notify a lawyer about anything or ask a question.
And then the people in charge of the money would do the math on "this earns us 1 billion dollars and the fine has a 10% chance of happening and would be 100 million... so do it anyways, it's worth the tradeoff". This happens over and over.
https://thenextweb.com/news/zooms-scary-webcam-flaw-also-aff...
Their lawyers didn't stop them from claiming to provide end-to-end encryption, a blatant misrepresentation that resulted in receiving a consent order from the FTC [1] and settling a class-action suit for $85M [2], so I don't think it's safe to assume that they would prevent the company from doing obviously unacceptable things.
[1]: https://www.ftc.gov/system/files/documents/cases/1923167zoom...
[2]: https://arstechnica.com/tech-policy/2021/08/zoom-to-pay-85m-...
No need to use quotes here, that was literally my question :D
> In all US states and probably a lot of countries, recording is illegal without the consent of at least one party to the conversation. In the US, in some states, all parties must consent to recording.
Literally every company that got caught having their assistants record conversations turned around and said the victims were informed and consented through the terms of use agreement.
Hmm... but, then again, there was that thing where Amazon Alexa was recording people without their knowledge... hmm.