The US does not have a comprehensive data privacy law or regime that protects consumers across the internet ecosystem," said Natasha Duarte, a fellow at the Center for Democracy and Technology, a Washington-based technology policy think tank.