Implement it with consent
What bothers me is Art's cultural disregard for how business is done over here. He used the words "on his own network" during his keynote which indicates that he has missed the boat near to completely.
Even in more privacy centric countries, if one can demonstrate risk combined with disclosure/informing through proper employee communications, everything gets through. It is the conversation that is needed, even if this conversation is short. Force feeding US corporate post privacy policy to Europe isn't the right discussion model...
What he was saying was something I agree with. How he was proposing steamrolling here in the EU was not.