[frereubu]

In many cases it will identify a person. I have two email addresses, a personal one and a home one, and I don't use any others. In my case this absolutely will identify me, and I would argue that in the vast majority of case this will be true as well. You're unusual relative to the general population in using distribution list addresses, and they have to start somewhere. I would also argue that this is exactly the piece of information that is most commonly used to merge datasets, and that's probably why the legislation includes it.