That's fair enough. There's no reason why the org should expect to be exempt from data protection and privacy rules that every other organisation has to abide by.
In their "heyday", major cases used to be about real questions of rights and freedom of worship/religion, but these days most of the cases they try to bring are at best dubious and at worst vexatious. As a result, their once proud record of winning has been taking a battering and their legal teams are increasingly being humiliated. And of course, they're haemorrhaging money for legal costs.