It's actually very simple - because of the nature of their use of the data. Laws can have subtlety, its not a magic on or off switch - if you want aggregate data for the number of bicycles that's not the DNA sample from each passerby.