In terms of the Prevention of Organised Crime act, all people who make profits from an illegal activity can be required to return the profits of that illegal activity.

A careful reading of the Espionage Act makes clear that anyone who obtains and retains classified information -- regardless of whether or not they communicate or publish it -- is committing a crime.

The Data Protection Act, which normally prevents companies from sharing such information, has a get-out clause for cases where it is clear that a crime has been committed.