Companies are scrambling to protect their customers’ personal information, but new regulations have shifted the definition of the term, making everything more complicated.