Ubuntu's multisearch surprise

The problem is that nobody in Canonical thought "hang on, there are some privacy issues here" and ran it past their lawyers, and whoever's responsible for privacy and (customer) data protection in Canonical. They could quickly have come up with a privacy policy, and preferably an explicit opt-in, that would have avoided all this.