Knowing corporate org charts for what they tend to be, reporting and analytics initiatives, and any server statistics therein, are considered revenue generating information (leads), and thus subject to agreements for the exchange mutually beneficial data sets.

Across my various jobs, I've had to write reports for departments, and open up permissions to internal people, to give read access for things they'd have no natural reason to care about.

If data is being collected at all, weird people will be looking at it. If not today, maybe tomorrow. But, no matter when, it's there for the looking whenever some internal lookie-loo decides it might be interesting.

Then what's the whole point of using this blacklist at the first place?!