Information security and privacy laws can carry heavy penalties and fines for organizations which do not adequately protect PI they gather and store. Data visible to an Construction Intelligence Cloud user depends on the consent notices configured and accepted by users in the source applications which can be configured with Analytics.
If these laws apply to your organization, it is your responsibility to ensure consent notices are configured in the source applications before they are required.