A leading privacy organization took lawyers to task over the use of data collected by fraudulent means.