It's possible, it's just not legal.

Someone could set up a Wikileaks type site for scientific and medical datasets and then what the law says becomes irrelevant.