citing privacy law violations