Data privacy laws take effect this year in five states, creating new legal landmines for businesses that use consumer data.