(a) the individual is named, or otherwise specifically identified, in the
report as the individual to whom the information relates; or
(b) it is reasonably likely that people generally (other than people to
whom the individual has disclosed information relating to the
individual's affairs) would be able to work out the identity of the
individual to whom the information relates.