In this case Apple's legal department had identified the serials and IMEIs as PII.
This is why the case is in civil court and not criminal (because Apple didn't violate any "laws" as you claim). It is a contract dispute.
> Boardman believed the meeting would finally address both issues.
> Apple fired him the next day.
This is a reminder that being honest with a company doesn't benefit you.
This may change, obviously. Likely for the worse.
This is not an indictment - it is merely an observation. (to mimic gpt-style for a moment)
First is strong and enforceable law that makes it unlawful to violate one's privacy. The second is to prosecute violators directly—that is, employees cannot hide behind corporate walls and allow the corporate entity to take the blame.
Irrespective of what employers demand, employees have a responsibility to obey the law. Risk of individual employees being chucked in the slammer would change corporate culture overnight.
Fining corporations alone is a waste of time, they see such fines as the cost of doing business, losing one's freedom for an individual is another matter altogether. Employees must be frightened of the consequences of violating the law or the practice will continue.