[throwaway3699]

This is standard practice at large companies with proper data controls. Usually they have a "break glass" feature for emergencies and don't let any humans access PII without a damn good reason.

[mschuster91]

99% of "marketing" companies are shady fly-by-night ops, are you expecting any standard procedures from there?