Since they continue to share the data with external researchers it appears they continue to fail to see their true failing which wasn't choosing to share the da

Since they continue to share the data with external researchers it appears they continue to fail to see their true failing which wasn't choosing to share the data with a commercial entity but choosing to share it with anyone without explicit consent. Getting explicit consent to share data is difficult and will result in less available data for research, but failing to do so because you think it serves a greater purpose is just paving the road to hell with good intentions. After the crisis moment has passed send a message to request explicit permission to share the data and unless explicit permission is given within a defined period of time delete the data.