For myself: I only do the most basic AWStats-style review these days. It feels more like reviewing basic overviews of server logs.

For others I work with: I offer them ethics-based processes and training and bring it up when appropriate. It's important to have some structure around this process and generally I find that people appreciate it. Nobody wants to be big brother if there's another way to get what they want or need.