The Privacy Commissioner's investigation found that, and we accept that as their finding. Statistically you would expect that it might happen in these circumstances, and we accept that those fragments of data collected can contain personal information.
On November 4th, 2010. See this statement in context.