You're out on a bit of a shaky limb here. There's clear precedent in contract law for damages when money is changing hands. But non-compensated access to data? I'm doubtful. Do you have any established case law in this vein you can point to?