Not enough information to make an informed judgement call here, but the ACLU's tack seems reasonable. There should have been a ruling first to determine if this guy had actually been defamed. Otherwise, the message the Florida court sent could be misinterpreted to read that the records of private companies and the identities of their customers are subject to invasions of privacy, regardless of the severity of the infraction.