I know.
We've been going through the whole thing with our clients for months now - hence the thing about someone getting sued, somewhere.
I was amazed when I read the email, expecting some common sense things to do (like, say, asking permission of the locals and rules on data security, etc.)...