isn't this just a change from opt-in to opt-out? will make a big difference but still gives individuals control of their data governance