Bureau's upstream searching of records routinely violates privacy protections, Judge Boasberg rules.