Are there enough intermediaries
to somehow give the big companies
plausible deniability?
In the News International phone hacking scandal [1] the likes of Rebekah Brooks shredded a bunch of documents as investigators were closing in, then claimed they had no idea how their journalists had found all those otherwise-inexplicable scoops. As a punishment she was.... paid £10 million to resign, then hired back 4 years later.Using intermediaries for deniability works, simple as that.
[1] https://en.wikipedia.org/wiki/News_International_phone_hacki...
When I worked in insurance, our HIPAA training indicated we could call a doctor and ask questions and pay the claim based on information obtained by phone. But we could also be told we needed to send a written request and HIPAA compliant authorization.
For that and other reasons, I suspect jobs like private investigator exist precisely because they don't have to comply with the same rules as, say, the police.
Reading further:
Frank Ahearn is ....a skip tracer (i.e., unlicensed investigator) who has worked to find missing people when a private investigator can’t do so legally.
You do sometimes see news stories about police officers getting caught selling DMV database queries to PIs.
> The HIPAA Privacy Rule protects the individually identifiable health information about a decedent for 50 years following the date of death of the individual.
https://www.hhs.gov/hipaa/for-professionals/privacy/guidance...