critcher wrote:
..............
the legality of their privacy being invaded would be tested in a
court and has nothing to do with the data protection act.

There is no enforceable 'right to privacy', in general terms.