Agreed, but this is something that has been going on for decades. Their excuse - believe it or not, I can dig up the source if you want - is that as long as nobody looks at the data it is ok to have it. I thought that was being incredibly economical with words, clearly that is not the intent of the law.