Different laws cover different data sets, making it difficult to ensure compliance. Many US legal and compliance departments lack familiarity with data privacy laws, and the risks of non-compliance can be significant.