This is correct.

This also applies to ISP's and wiretaps. They need to provide NAT mappings when doing a wiretap if i remember correctly.