We used to do this in Console with a checkbox; from a privacy perspective we should do it in Riot also, somehow. We may also want to give ISes a way to publish their terms of use and let the user confirm they really want to use the IS.