Tighter privacy rules have had some benefits for the biggest companies. That may not last.