I don't trust legal solutions. They can only provide redress when someone is caught, but it's just so easy to snoop without being caught. Only possibilities are keeping the data on machines you control, or using encryption.