It's ultimately not up to Vlad. If the law declares email addresses are PII, they're PII.

If he's positioning his company to challenge that law when he runs afoul of it, that's a choice they can make but it's a business risk (and IANAL, but... Probably one they'll lose).