#IANAL but this looks like a #criminal offence under the various #DataProtection legislation
that data has been processed, possibly without the right of access to it for the purpose, and that it has been processed incorrectly - wrong data has been recorded, or kept, or a decision based on data has been incorrectly taken.
And it has clearly caused harm but that would be the #civil case, probably in #negligence.