Tracking isn't the only thing that the law covers.