And if it can and you're profiling the behavior of many IP addresses, you may be doing humansubjectresearch.
2
But the discretion given to the CIA director to "approve, modify, or disapprove all proposals pertaining to humansubjectresearch" has not previously been public.
3
No consensus yet exists on how to handle incidental findings (IFs) in humansubjectsresearch.