A lack of federal regulatory legislation leaves US privacy concerns to battle for attention with other business priorities.