I believe the data is being collected to help prevent discrimination based on any of those characteristics.
Besides , is it anyone’s business as to what I identify as ? Is it ethical to force me to reveal this ?
The person leaking it is acting unethically though. It has no whistleblower value of any kind, and betrays those who filled it out thinking it would be internal only.
Maybe not the exact same spreadsheet, but the first one. It would be surprising if it was different though.