I think the case law is now what guides organizations in how they use personal information. However, adding this kind of definition to the act would, in a way, further confirm the test set forth in Spencer.
On April 17th, 2024. See this statement in context.