The companies using VPN for work can file an application for an white list exception, if they provide an application with a list of employees having access. I think this is how it works in my country. You are making an elephant from a fly (proverb meaning exaggerating minor issues).

For better security, a signed obligation to observe law might be collected from every employee, and an access log kept, with records signed by company's digital signature.