Should the privacy commissioner crack down on info-leaking sites?