I can see a suspension, but what law did he violate? He didn't steal the passwords, they are still technically the City's. Things like this always worry me in a work place. You will tell me what you know etc. etc. even if it is there business, as in this case, I would myself probably refuse to Give information under duress.
Stephen