This talk will examine the current debate about how KDD research should be legally regulated, and what it means if privacy rights fail to be protected . . . and what it could mean if they are.