New data privacy laws noble, but futile