I need to respond in a way that educates them about respecting privacy, the legal aspects, and redirects them to appropriate resources if they have a legitimate need for information. Also, using a professional tone and avoiding any engagement with the potentially illegal aspects.