How your company can limit its liability for US data collection lawsuits