Unless someone actually profits or acts illegally with the data obtained from their unintended access I think you should essentially be given a pass - to the extent that I'd want such cases ruled invalid.

Otherwise we end up in the bad situation of having a law which is going to be applied very unevenly, which opens it wide up to corruption.