While the college said its staff had "followed protocol", many decry an alleged invasion of privacy.