Case addressing user data protection concerns related to foreign access to millions of American citizens' personal information.