You seem to misunderstand the situation. These contractors were reviewing sensitive customer data, not collecting data of their own.