This is what worries me. Am I reading correctly that not only could the private organization divulge the information they currently hold, but they could be dispatched to collect brand new information on behalf of the enforcement agency, and then share that with them, again without consent or knowledge?
On February 22nd, 2007. See this statement in context.