Motion to suppress shouldn't get anywhere if the credentials are not properly those of the people using them, there is no privacy right in OTHER people's protected information; if ACLU is intervening as a third party, the Judge can just blow them off for that matter. Even aside from that, there are several ways to handle it without compromising the information or suppressing it, such as sealing the part of the record with the actual sensitive information, redacting parts of it, getting consent from the real ID owners, or closed evidentiary hearings to settle admissibility issues.
