Privacy law exploited to reveal fiancee’s data