This is yet another example of secondary data misuse. Official university statement: publicaffairs.vpcomm.umich.edu/key-issues/l... a) did the students consent to the commercialisation of their data? b) whether there was no "identifying information" is irrelevant c) who is the 3rd party vendor?

There is an urgent need to regulate these scenarios. We analysed similar scenarios here: papers.ssrn.com/sol3/papers....#PurposeLimitation@rainermuehlhoff.bsky.social