Know how much the law does—and doesn’t—protect your privacy rights.