Privacy Law Must Fit the Bill