What can we learn from Data Leakage and Unlearning for Law?