I interpret that as any site that has access logs, given that IP addresses can be used for geo-location. Quality of geo-location is debatable but I do not wish to debate this in court. Profiling is by design part of most forums and chat servers. Forums ask for age for optional birthday announcements and allow the person to put in whatever personally identifiable information they wish to enter. Anything beyond a mininal chan board or a static blog is going to have information that can be used to profile the visitor.

So in this case, does this law clearly define "their information" or does this have vaguely worded wiggle room? I'm not even sure I want to go too far down this rabbit hole. People sometimes use a picture of their kid in their forum avatar.