Why is the concept of "material risk of harm" significant in this case?
It is significant because it establishes that even the potential for harm from unauthorized data practices can be sufficient for legal standing.