Despite tougher privacy regulations, further safeguards are needed that require consumers' clear consent before personal information is exchanged.