To say that the data privacy and cybersecurity regulatory landscape has become a challenging minefield for organizations and lawyers to navigate would be an understatement.

Between a patchwork of state data privacy laws and a rise in enforcement actions from federal agencies, companies' compliance effort can mimic playing a game of Whac-A-Mole—blindfolded.