Wow, regulators and government entities are terrible custodians of personal data, I'm shocked...