An agency (will remain nameless) has disclosed another applicant and their application details to me. To make things worse they have also disclosed the rate of pay of 9 members of staff. Is this legal and if not how can I report them?