New UK law could criminalise uncovering personal data abuses

>