Yep, exactly, this is already covered by the privacy policy.

https://www.anthropic.com/legal/privacy

I called out their experience and knowledge of Institutional Review Boards which govern human subjects research at universities. Embedding consent in a privacy policy would not count as informed consent [1].

Of course, only institutions receiving federal funding are subject to these rules, so companies like OpenAI and Anthropic are legally in the clear. I'm just saying, you'd think they'd have more awareness considering they've all been trained about informed consent during PhD.

[1]: https://www.hhs.gov/ohrp/regulations-and-policy/guidance/faq...