That comes from a study in the United States. I don't have the exact reference here, but we subscribe to many newsletters that cover the situation. This was a study coming out of the United States that was reproduced in one of these privacy law newsletters.
On February 22nd, 2007. See this statement in context.