No, don't *know* it's the DPA. As you say, you've written on the form which implies you agree.
BUT ... the form says nothing about agreeing that the CAA can provide your information, and since some of that's medical, I can bet someone has good reasons for not doing anything yetawhile.