The potential for class action lawsuits and regulatory investigations is growing, meaning organizations must have conversations about tracking technology