Not sure what is not clear from this: “We will comply with lawful requests as long as they are delivered according to all the laws and regulations," NordVPN says. "We are a company that protects the security and privacy of our customers, but we operate according to laws and regulations.”
Why you don't find articles googling is that Nord puts a lot of effort in removing or burring it (google their dispute with TorGuard). Same what they tried to do with the breach in 2018, they half-ass disclosed at least 6 months later after being known to them. (at a point in time the breach already leaked)
Example I gave was a talk in a hacker conference, with no recording (common request for hacker conference talks).