Incoming laws, combined with broader developments on the threat landscape, will create further complexity and urgency for security and compliance teams