Where Distressed M&A, Privacy and Cybersecurity Laws Collide