I'm absolutely confident that particular scenario didn't go before the committee that developed these recommendations. What we recommended was a framework so that the government departments in question, subject to oversight or consultation with the Privacy Commissioner, could make that particular decision.
On June 3rd, 2008. See this statement in context.