Yeah, and as an ex-employee, that's something they heavily "rely" on, and push as an end run around laws.

Like in my state, LE can't collect this stuff directly. Then they started saying "Well, we can do this..." and started contracting for private companies to do the collection on their behalf. When _that_ was legislated away, they've now pivoted to "Well, if the company is doing it of their own accord, we can still purchase the data since it wasn't, technically, created for us."