Tennessee and Minnesota have passed data privacy acts forcing software leaders to rethink their data governance strategies.