I think that Mr. Hasbrouck points rightly to the EU negotiations with America on PNR data, and then the EU-Canada negotiations. Canada and the EU managed to have an international treaty on the exchange of PNR data that was praised by data and privacy authorities precisely because it limited the use and anonymized the data, which meant you took the name off from the records. You could still use the information for the creation of profiling, but you couldn't use it for individuals. It was also praised because the data were disposed of.
I think that that's definitely a possibility.