Walking the privacy talk isn't as easy as it used to be for companies in the U.S.