If that was the case then, what would be the point in the constitutional rights to privacy.
Any company claiming that to be bad faith would be negating an individuals right to privacy.
In any event you could argue data protection rights and also that you feared Identity theft as the Whois information is a public database.
I have seen no statute on this, and anyone wishing to gain access to protected whois information can simply request it via a lawyer if they have just cause or if someone were to issue a court order for it.