it is possible to sue them for the breach of privacy act as with this, they might be able to obtain information and data from us without our consent.

I don't know about the US, but in NZ the privacy act is pretty strict, and so are some other commonwealth countries