This is a sticky legal situation, your right to privacy was obviously stepped on but not entirely legally infringed. Either way you should so this to BIA and see where it goes.