In terms of what Ian is talking about, I think, an idiom in the U.S. that has been talked about for a number years is called “do not track”, which is a default setting. It basically says that for all this data collection that you.... Any time somebody goes to a website, data is being collected, whether you actively or passively provide it. Now the rule is basically an opt-out rule: you can opt out of it if you're given notice that it's happening. The converse is “do not track”, and really, that's the most protective rule—
