The card/account owner clearly has a right to know the activity on their card. The usage information are facts. They can't be copyrighted by either the issuer or the account holder. I don't see where any privacy rights for the thief come into play, they definitely did not agree to be bound the the account terms and conditions.
What could be true is if the account holder violated the terms and conditions by knowingly allowing someone else to use the card. I'm actually not even sure what my license agreement allows, but it wouldn't surprise me if technically I can't give my card to a spouse or child to use, instead the issuer wants additional cards issued to make sure anyone using the card is bound to the account contract.