The law only provides compensation for actual harm or losses suffered. If you can prove that you suffered some economic loss or physical harm from the release of your information, you can sue; but if you have not suffered harm, there is no point in suing, because you would not get any compensation.