The issue would not necessarily be whether an individual would succeed on a particular tort claim.
The focus of the privacy assessment should be at a more general level: Does the use of the system intrude into the personal lives of individual end users?