Leech, Grant and Mierzwinski: Privacy law isn't strong enoug