I think some clarification might be needed here, "users who are not a member of any organization" might clearer than "users not in organizations", but the main thing is that this raises the question: what organization will the dataset belong to? And what does that mean for the authorization control of this dataset?