Cybersecurity compliance, already an anxiety-inducing topic for many in-house counsel, is about to get even trickier.