An IRB can waive the requirement for consent when the data is de-identified and the barrier to gain consent would be onerous. In this case, with 25 million slides, and quite a few of the patients are dead or lost to follow up, I'm fairly confident the IRB would waive the consent requirement.