I think making this mandatory with the option to opt out rather than the reverse maybe crosses a privacy line.

Is it really that different with a medical procedure? You’re signing informed consent forms regardless - it’s just a matter of if it says “decline” next to the check box as opposed to “opt-in.”