That's what I hear. They're looking into it in more detail.
I'm not sure, however, that there was any question about this issue. My understanding, and correct me if I'm wrong, is that the Privacy Commissioner said fairly clearly that if there was consent, it was okay.