

So what penalty will be given for those performing these unlawful activities? Some snippets from the Guardian article:
Sooknanan said the department “improperly” disclosed and maintained records.
In her ruling, she cited two people who had been incorrectly removed from their state’s voter roll list because they had been wrongly identified as non-citizens.

It’s still an early work in progress but it has very high velocity with PRs and issue activity:
https://github.com/storytold/photocraft/pulse
Something to keep an eye on and see how they progress against their roadmap:
https://github.com/storytold/photocraft/blob/main/ROADMAP.md