well my first port of call would be to qute the data protection act at him, demand the fine back, make sure you've backed up ur evidence oof course, and tell him if he ever touches ur beloved hardware again u'll break his fingers!