But while data privacy laws are indeed exploding—with more than six that passed in the U.S. just this year—it's becoming clear that they're built on a common framework.