"a party controlling personal information may use that personal information to compile profiles for statistical purposes and may freely trade with such profiles and statistical data provided that the profiles or statistical data cannot be linked to any specific data subject by a third party"