The US needs good data privacy legislation.