Magdelina, It would be interesting to see what the statistics would look like now if the study was done again. Do the rates of data capture change? Do the methods grow less visible (the spyware example)?
As you know, I think of personal information and identity in cyberspace as a sort of valuable property - in a way that you probably wouldn't in the tangible domain. Personal information and identity are detachable in Cyberspace. They have value to a third party. That information can be exchanged for money. There is an author of the information and a recipient. Rights need to be divided between them for the sake of equity and function.
So I don't draw as much of a distinction between "property" and "identity" as, say, between the public domain and property interests. The former distinction represents a difference of detail (and the direction of dataflow) in Cyberspace but not of basic structure. Whereas the latter represents a fundamental dichotomy between things that may be owned and things that are shared.