You don’t have to knowingly break the law to be criminally charged. If you’re in a position where a law might apply, you should do your due diligence or get legal counsel sign off. Selling private location data should easily cause a competent executive to think twice and confirm it’s okay.
I didn't opine on this instance wrt if legal counsel did or did not sign off. If corporate counsel signs off on criminal behavior, it should be criminally charged.