> the marketplace is loosely regulated in the U.S., which has no comprehensive national privacy law.

Well, except of course, the US constitution:

The right of the people to be secure in their persons, houses, papers, and effects