As soon as the data is collected it is going to be used. That is where the privacy invasion is. If a massive data set on citizens leaks and becomes available online, people will still consider it an invasion of privacy, even if it was never "used" prior.