There's nothing in the Constitution as it stands today that prevents us from having strict data privacy laws. No amendment is needed.