While I can appreciate what the OP and others are saying, the actual laws on privacy are in fact quite limited.
So while the OC, the OC committee or the OC manager might choose to use just lot numbers, I doubt they will breaching any actual privacy law if they don’t.