A federal judge ruled OPM violated the Privacy Act, unlawfully disclosed records belonging to tens of millions of current, former, and prospective federal workers.