If the federal government does not lead on the issue, others will step in, risking a hodge-podge of provincial privacy rules, increasing costs for business, discouraging investment, and leaving consumers uncertain.