‘Fake citizens’ ceremony plan might have violated privacy of new Canadians