[scarface74]

A former company I worked for was under a consent decree. Their legal team had to come up with remedies that were acceptable by the government to address them - not their security team.

I was the dev lead responsible for writing software that would be used by the department that was most impacted by the decree. Should I have taken it upon myself to create pop ups informing them to be careful about compliance? Legally, I probably couldn’t have been fired but would that have displayed good judgement?

When you are part of certain departments or positions, you have more access and therefore are expected to have better judgement.