It's weasel words. "Personal information" is not strictly "personally identifiable"; it doesn't matter that you can trivially de-anonymize people with even a modest amount of data.