Dude the fact that nobody you know is worried should be the first clue that something is really wrong or you are hanging out with wrong people. Security, Privacy &amp; Data Mining research are ripe for bureaucratic takedown. Incidences like these will only lead to harsher requirements and stifle future research. Its essential for the security community to police itself. As far as Patrick knowing what he&#x27;s talking about I do not take anyone who has never published a research article, let alone an abstract seriously.<p>We have access to hundred of millions of medical records, if were to throw away integrity, ethics and morality out of the window. The results would be spectacular enough to warrant a front page news in all major newspapers. And it would completely destroy any future medical research in this field, since we would have betrayed public trust.<p>Oh and guess what we are exempt from IRB. The true reality is that research to a large extent cannot be completely controlled &#x2F; monitored. It is thus extremely essential for a research community to hold itself to some ethical standards.