Regarding the consent model, I'll simply repeat that I don't think it's necessarily a matter of choosing between opt in and opt out, although that may work in some cases. The issue has merit, but the fact remains that we rely too often on a model based on consent when the consent is fictional. Other solutions exist, such as an examination by an organization such as the Office of the Commissioner.
