The law would not be necessary if companies were upfront with how they collect and process information about individual consumers. Now this is a compromise many consumers want.