Legal precedent for AI data consent updates