When the Data Gets it Wrong, Who Pays the Price?

A private company built a 100,000-camera surveillance grid, wired it so federal authorities can access it, and operated it for more than a year without a license. Is that okay?