Creating rules around how businesses can use consumers' personal information is proving to be easier said than done, as privacy regulators wrestle with how to rein in artificial intelligence and automated decision-making tools, or ADMT.