Actual privacy and security laws aren't passed because this is not a sufficiently bipartisan issue to get enough votes.
One party is largely in favor of stronger privacy laws, but with enough dissenters that when that party is the majority party they still would need help from the other party.
The other party is largely against stronger privacy laws, without enough dissenters to overcome the more pro-privacy party dissenters when the more pro-privacy party has the majority.
One party is largely in favor of stronger privacy laws, but with enough dissenters that when that party is the majority party they still would need help from the other party.
The other party is largely against stronger privacy laws, without enough dissenters to overcome the more pro-privacy party dissenters when the more pro-privacy party has the majority.
So nothing passes.