And in doing so, they would be violating an important law that is just responsible for protecting the confidential information from users.