We really need to update all relevant laws to the same standard as GDPR's "informed consent" where hiding something in a wall of legalese doesn't cut it.