However, if 150m people's personal private information is disclosed inappropriately it is a valid criticism.