An unintentional AI data breach is enough to warrant government sanctions