I could see a law that has stricter terms for sensitive data, and civil servants with access to it. I'd be ok with that. Maybe even felonies depending on what occurred and whatever the law is.

It's just the law in this case doesn't fit what happened.