I think it's challenging to know what anyone expects.
I want to be clear that there's a very critical distinction between personal information and de-identified information. For personal information, we're very focused on consent and the privacy implications, but when it comes to de-identification, the de-identification process itself is what protects privacy. That's our focus there, and that's how we protect our customers' privacy on that front.
When it remains in personal format, our focus might be more on consent. That's generally the primary driver in our current legislation.