Violating Americans’ privacy "not just unethical but illegal," senator says.