why america urgently needs a federal data privacy law