Here is the kicker -- I think he is in violation of the EU Data Protection laws and he could be sued in France in a French Court under that statute by any person whose personal data is disseminated without explicit permission by that person.

So, in theory it is a matter of time ...