In most fiat mines environments I have explored, consent has to be explicit. This tells me that there has to be some legal définition of consent somewhere.
But here we’re on #nostr. So I don’t know.
I think what the EULA says in the client people use is probably the most important starting point. Also, some clients expose properties of the relays you connect to, maybe there are terms of use exposed there also (I haven’t checked but I will).
I do #dataanalysys and #datascience for a living. I have some #nostr projects ideas myself but I don’t have the time rn. Yet I am interested in this also and interested in what you’ll be doing! I’ll be following your work.