By ID, gp likely means government id, not identification by face. I can recognise my neighbours, but that doesn't mean I have their personal information.
In Europe, data that can be used to identify a person is also protected. For example, IP address plus timestamp is protected. Because you could obtain customer information from the ISP.