I did some work for an organization, who, after the Ashley Madison leak, downloaded the entire leak and searched through it to find out if any of their employees were in the dump.

I wondered, wasn't the data still technically private data that was just stolen and released? And wouldn't it be against the law to then download a copy of that data yourself? But it was actually the legal department that downloaded the dump, so I didn't have much to say.