State regulation of privacy and information security