Data breach laws have proven to be helpful to consumers, but daunting to those charged with enforcement.