...
In the absence of any real international law, we kick the can. We should have something about privacy in the relevant documents, but it’s more along the lines of notification of what we do, not necessarily changing what we do.
If we had consent, how does that change privacy? Does Brown still have liability? We don’t know the answer, because there’s no case law about how this is viewed on an international basis. There’s insufficient data about privacy concerns across national boundaries and no case law to point to how to do it. We’re probably looking at a new model, but we don’t have the examples to point to direction.
AI - Should we add an item to REFEDS with this issue? Yes
...