Two small points:
* you don't always need to sign something to enter a contract or accept
a regulation;
* I know that laws sometimes (e.g. Italy) require orgs to clearly tell
users who's managing their data and to teach such delegates what they
must do, but I suppose they don't necessarily care about additional
legal sovrastructures that reiterate what the laws themselves order.
Nemo