From ITU Radio Regulations Vol. 1 from 2016
Administrative Provisions:
17.1 In the application of the appropriate provisions of the Constitution and the Convention, administrations bind themselves to take the necessary measures to prohibit and prevent:
17.2 a) the unauthorized interception of radiocommunications not intended for the general use of the public;
17.3 b) the divulgence of the contents, simple disclosure of the existence, publication or any use whatever, without authorization of information of any nature whatever obtained by the interception of the radiocommunications mentioned in No. 17.2
18.4 § 2 The holder of a licence is required to preserve the secrecy of telecommunications, as provided in the relevant provisions of the Constitution and the Convention. Moreover, the licence shall mention, specifically or by reference, that if the station includes a receiver, the interception of radiocommunication correspondence, other than that which the station is authorized to receive, is forbidden, and that in cases where such correspondence is involuntarily received, it shall not be reproduced, nor communicated to third parties, nor used for any purpose, and even its existence shall not be disclosed
Aeronautical Services:
36.3 § 3 Except as otherwise provided for in these Regulations, the person responsible, as well as all the persons who may have knowledge of any information whatever obtained by means of the radiocommunication service, are placed under the obligation of observing and ensuring the secrecy of correspondence.
37.11 § 4 Each administration shall take the necessary steps to place operators under the obligation to preserve the secrecy of correspondence as provided for in No. 18.4.
I guess some countries fall short of enforcing what they signed up for. My home country doesn't. You won't find any ATC streams from this little part of the world.