When users register for an event, they should explicitly consent to the site's privacy policy, so we should have an input on registration forms for this.
Right now I think it should be optional in case someone adamantly refuses to have their regform modified