privacy violation case