Keeping track of the IP address is one thing, but then using your ISP’s database to link this back to a person with the intention of holding this over their hea

Keeping track of the IP address is one thing, but then using your ISP’s database to link this back to a person with the intention of holding this over their head if you ever need to sounds like a form of extortion to me. Or is it fine when it’s the state doing it?