This is not really about infosec, this is about privacy and data protection. And you can try to play this down as much as you want, but I think this is another symptom how much the current discussion about how much data gathering is OK is needed.