Not having a clear consent statement or saying what they are doing with the data seems the correct artistic choice.