We go back to my comments around privacy impact assessments being tools for self-regulation. We need to have an external body like the OPC that decides whether or not these things should be used in the first place. A body like the OPC could decide what sort of processes need to be in place for people to give informed consent around the examination of their devices.
On February 15th, 2024. See this statement in context.