News broke last week that the Federal Emergency Management Agency had exposed personally identifiable information related to 2.3 million survivors of Hurricanes Irma, Harvey and Maria. FEMA sent information that included bank names and electronic transfer numbers to an outside contractor responsible for finding hotel accommodations for relief applicants.

The exposure was made public in a report published Friday by the Department of Homeland Security, which also indicated that FEMA had violated the Privacy Act of 1974. While that all sounds quite serious, the chances that FEMA will face any significant legal repercussions are relatively slim.