“In this group of issues related to fair play, we consider whether we are putting data subjects in a position that undermines their autonomy or authority about how their personal information is used.”