Bringing clarity to the labyrinth of state and federal laws regulating collection, use and disclosure of personal data