Because the federal government has yet to install a nationwide framework on data privacy laws, states are stepping in and passing different laws, creating a patchwork of regulations.