It would have to be, if they were to try and take this argument further. But ultimately the question of who the data is concerning/belongs to is more complex than the article lets on because there are two users involved in the scenario that generated the data.

In either case it must belong to one of the users, so I guess it will be good to clarify.