I don’t know if they are allowed to or not but where I work I have the conversation almost weekly that what our users are asking for is technically possible but goes against policy.

In the case of AI, it only takes one unscrupulous person to not care about the policy or law or live someplace where the laws don’t apply for none of the rules to matter.