IANAL but the city could sue, whether or not they would would win IDK, if I were fighting it I'd argue along the lines of "if I meant to misuse the data I would

IANAL but the city could sue, whether or not they would would win IDK, if I were fighting it I'd argue along the lines of "if I meant to misuse the data I wouldn't have told you I had it and scanning my hard drive opens up my personal data to the same potential mis-distribution that I notified the city of." I agree with the author's reaction though, and any non-court ordered scanning of my system would have to happen under my supervision, with strict agreement on the how.