But they don't need to reach agreement on a list of sensitive places (for the case). They only need to show harm, no?
Inferences of sensitive data are a hard problem, but it's one we're going to have to solve. There's the exact same issue under the GDPR.
♥ 3