Writing the Rules on Data Privacy in S.F. Could Disrupt the Disrupters