The legislative wrangling over what companies can and can’t do with their customers’ private data is becoming more complex in the state of Washington.

And it could become a sticking point for lawyers on both sides, enabling lawsuits that could mean complex and expensive litigation for technology companies that do business there.