As companies have watched the domino effect of states passing their own data privacy statutes over the past five years, worries over a complex and diverse patchwork of laws have been growing.