I use Google and various other services that harvest and use my data in ways that I dislike, but I am sometimes willing to trade some privacy for some utility. It's my choice, notwithstanding that I may not be sufficiently informed or aware of the consequences. If, however, a company that I work for or that is providing me with an education forces me to do this, it's another matter altogether. Whatever they may feel about their own privacy, they have a legal and moral duty to protect mine.

An answer that I have repeatedly received on my numerous challenges to this policy (it's not just O365 - a very large number of our systems that contain extremely private data are now in the US cloud, from online exam systems to student support systems to, now, Moodle) is that none of our data are safe anyway, so what does it matter? Words fail me at that point. I accept that we fight a constant and losing battle against those who profit from abuses, but that doesn't mean we should simply give up. It's not helped by the fact that the Albertan government doesn't seem to care much either. In other provinces, such as BC and Nova Scotia, what we do would be illegal but, with some provisos (mainly based on a liberal interpretation of PIPEDA), Alberta still allows it.

Any computing device connected synchronously or asynchronously to a network can be harvested...and is.  Another Snowden déjà vu.

The question is no longer why or how could digital data be used, rather its just a matter of when...and soon even that will not be a question....ah too late no longer a question, now 24/7

PS. I deleted my LkIn account... at least from my display.

Indeed, Steve.

Any bicycle lock can be broken within about 5 minutes with the right tools. Most take seconds. But should we stop using bike locks? Or legislate that anyone can take anyone else's bike? I think we have to start somewhere, and legislation (with teeth to bite transgressors in ways that act as a real disincentive) is not a bad place to start. Meanwhile we need to build better locks, or educate ourselves to use them better, or maybe to rethink how we share our data altogether. I'm a bit intrigued by Solid, not because it's a new or radical idea, but because it has TBL behind it. Not an incredibly reliable solution, but really a lot better than what we have today.