Allowed to do? Not prevented from by technical measures, but certainly not allowed to do.

Considering the goal is to identify people, this is undeniably PII. As the article demonstrates, it also pertains sensitive information.