@david_chisnall@infosec.exchange @Floppy@mastodon.me.uk A recent one I reported to an American partner university took surveillance data from Chinese students that monitored their whereabouts across a university campus. Absolutely no opt-in or even opt-out, no consent requests, considered non-problematic because the data wasn't immediately identifiable. I was GOBSMACKED.