In the wake of new data privacy laws, companies face a delicate balancing act between compliance and a positive user experience.