Opinion: How To Design A US Data Privacy Law