Government ordered to compensate asylum seekers over privacy breach