Are you suggesting the CEO configures the core upstream routers / BNGs without telling me? This is certainly a shock.
Regardless - I was talking about us as an ISP collecting/selling that data - not the data we must provide to government agencies to fulfil our legal obligations.
NZSIS has direct access to your network and 100% has a copy of that DNS traffic, including any and all metadata for every single person.
Domestic SIGINT in all five eyes countries is drag net, it's all collected, facilitated by ISPs.