Shouldn't as in they might contain names against people's consent and that's bad, or shouldn't as in there is some process in place for people to submit their n

Shouldn't as in they might contain names against people's consent and that's bad, or shouldn't as in there is some process in place for people to submit their names and they derive the data from that process?