Lawful collection, always
No pretexting, no impersonation, no circumvention of access controls, no hacking, no purchasing of unlawfully obtained data. If a brief can only be met that way, we decline it and tell you why. That answer protects you as much as it protects us.