Not writing down anything youd be upset another person read is a pretty standard instruction for people doing interactions with ordinary business clients anywhere that data protection legislation theoretically allows them to make a statutory request the company send records you hold about them (Probably other jurisdictions too, if their lawsuits have a discovery process)

And that's "dear junior sales team members, please don't put your opinion of the client in writing, in the unlikely event they ask for a data dump they might be a bit miffed", not "dear compliance chief, please don't write confessions to breaking laws our lawyers might be able to argue we attempted to comply with when we inevitably have to defend ourselves in court..."