It gets tricky with 1) individuals not recording for commercial purposes in 2) situations where there isn’t “a reasonable expectation of privacy.”
More importantly, you have to catch the person doing it. You’ll likely never know what they did or the harm they enabled.