“difficult … to overstate the carelessness with which Crosscheck handles the personal data of US voters.”