Read privacy statutes for a living before writing about them. Tracks who collects data, who sells it, and the rules meant to govern both.