So essentially..
You manage to identify people from a supposedly anonymised dataset, but as long as you didn't do it with malicious intent and then flag it to the ICO or the publishing organisation's data controller (or both simultaneously) within 3 days, you probably don't get prosecuted (successfully) for doing so. Best not do any of that sort of research just before a bank holiday weekend then!
At first glance it does seem to be a more sensible and pragmatic approach...
