Data privacy regulations aren’t known for being light reading. That doesn’t make it easy for businesses to become compliant.