The fact that offshore support is allowed to access KYC information for US-based customers should be against some sort of regulation.