Absolutely it should be a criminal offence to doxx people. If someone isn’t committing a crime and prefers to use a pseudonym, more power to them. If you deliberately publish their identity without permission, to the deepest layer of Hell for you.

In the middle are various levels of negligence and poor handling of PII which should attract severe punishment to provide economic incentive to protect PII or simply not collect it in the first place.