> then in my opinion a court should step in and declare it void so that Microsoft isn't allowed to use any private data until they get their act together.
I hear what you're driving at, but "a court" cannot be both prosecutor and judge at the same time. This page is about that, possibly starting a civil suit to have a judge look at this and act accordingly.