I work for a non-profit and recently I applied for access to non-publicly available data. My concern is that this data is not very well protected, as it potentially contains personally identifiable information, and all it took to access it was a URL.
This data comes from another non-profit that is predominantly federally funded. I know this stack exchange is focused primarily on open data, but does anyone know where / how I might go about reporting my concern? Is there a federal agency for this sort of thing?