The lead generation firm argued that the CID’s notification of purpose was too vague and thus failed to comply with legal and regulatory requirements.