- the decision is welcomed by privacy groups as a step forward, but the data will only be anonymised after after 18 to 24 months