@Dorothy Parker,
There is no law against it. It's unethical and immoral.
In order to remedy this from happening again, your daughter should always keep her phone 'locked' and passworded when her phone is not in her possession. That's why they have that functionality built-in.