Companies in the US are meeting new security and privacy regulations head on and they’re ready for more. When it arrives, though, they’d like more clarity.