This is a temporary restraining order (TRO), so the judge did not need to, and did not actually, rule that they did violate the Privacy Act, but that they <i>likely</i> did so, and that this probability of success on the merits coupled with the fact that the disclosure of their banking information would constitute irreparable harm justifies a TRO while the case proceeds.
How come there isn’t much discussion of DOGE on this site? Seems rather important and relevant to the question of whether the Silicon Valley approach to breaking things and moving quickly works for government. Also whether such an agency should have access to our data.
We should possibly recognize that building federal troves of data that rely on the "good deputy" model are outmoded and need massive overhaul.
TROs are preliminary injunctions in all but name. I expect SCOTUS to issue writs of mandamus reining them in otherwise Congress will simply remove the nationwide ability to issue them from the lower courts.