That's not necessarily the case. It may be the case now, but it shouldn't be the case. The Privacy Commissioner should be much more active in saying “You can't use that for this reason”. But if they're not doing it, they're not doing it--
On May 30th, 2006. See this statement in context.