The bank already screwed up by not following a privacy policy. That's why they ended up sending private information to a Gmail account.

Google did the right thing by showing the bank what it means to stick to a privacy policy.