I still think the offence should be not properly de-identifying the data rather than taking advantage of that fact or atleast there should be an intent to cause harm requirement
I still think the offence should be not properly de-identifying the data rather than taking advantage of that fact or atleast there should be an intent to cause harm requirement