Answer:
No, it wasn't a privacy violation
Explanation:
Since the data given to the police had been anonymous, the individual privacy of customer has not been compromised. The company cannot link the data back to an individual, nor can the police.
Clearly, it's anything but a policy violation.