First Conviction Under Data Law