Well having privacy is ok. However if there is an valid order to provide queries for specific source IPs, that is probably a reason to comply. If anyone asks for all data, well yeah, that is not ok.