The state of data privacy in the U.S. is not unlike a Rube Goldberg device.