I don't know if you're the author of that medium post, but instead of privacy@ and support@, the author/you really need(s) to be emailing legal@. They're the ones who can 'softly nudge' the rest of the organization into compliance.