America's best chance for nationwide privacy law could do more harm than good