tech privacy legal action