Consolidating citizen records into the SAVE database violates federal privacy rights