"They're sweeping under the rug that they allowed this research to be done on students whose parents were unaware and whose data was being breached," Whitman says. "The university allowed this to happen, and there were no repercussions because of it."