

No NDA necessary. That’d be under other laws/systems. Some would be under things like HIPAA in the US if they learned the information in the course of their work. At minimum, it would fall under civil liability if they publicised private information of private individuals and those people claimed that it caused them harm in some way.






What should they do? Responses sit either in the non-violent space, which is only effective when the people in power have a sense of shame for ‘failing to represent their constituency,’ or the violent space, which is self-destructive and, if you’re facing the gigantic american system, suicidal, and feeds into rhetoric about how the government needs to crack down on violent extremists, helping to legitimate further authoritarianism.