This is good news if you're a business that needs to cover its ass, bad news if your personal data ends up somewhere where it has zero legal privacy protection.