Not talked about in the article, is that this report is actually trying to move progress forward to addressing the issues surrounding the new, abundant, and detailed information and how the current framework of 4A legislation isn't really appropriate in the new data market.
From the conclusion:
U) Third, as part of this set of policies and procedures, and/or as a complement to it, the IC (Intelligence Community) should develop more precise sensitivity and privacy-protecting guidance for CAI (Commercially Available Information). Again, we offer several suggestions for the development of such guidance.
So, in some light this should be considered progress, not the 800lb gorilla in the room.
Rules or guidance just serves to legitimize it. Hey, it's OK as long as we follow the rules... oops sorry we didn't follow the recommended practice there... quite different than getting caught breaking a law.
From the conclusion:
So, in some light this should be considered progress, not the 800lb gorilla in the room.