If anything I'd vouch for leaking to a data protection watchdog if nothing gets done about it.