Re: [security-services] SAML deployments that use consent step?

[Josh Howlett <josh.howlett@gmail.com>]

I previously wrote that:
> There is certainly a place for consent, but it needs to be used  
> judiciously. It is certainly not (in the EU context, at least) the  
> silver bullet or "best practice" that proponents of "user centric"  
> approaches sometimes suggest.

One of my colleagues who specialises in DP law (and understands this  
stuff, unlike me) informed me today that the UK Information  
Commissioner's Office (the body charged with "upholding information  
rights in the public interest") has issued a statement to the effect  
that consent should be considered the cause-of-last-resort for  
releasing PII.

josh.