It's not just O2 in the UK. This happens all over the place. See this talk done in 2010: http://mulliner.org/security/httpheaderprivacy.php
It mentions: Orange (UK), Rogers (Canada), H3G (Italy), Vodafone/BILDmobil (Germany), Pelephone (Israel), and on and on...