Do Data-Privacy Laws Actually Hurt Consumers?