my guess is that with the patriot act the state could easily get “proxied” address information from the domain registrar.
there is a simliar law in Utah, with more penatlies. I believe that a bunch of marketers and retailers have gone to federal court to have the laws blocked.
when governments start contacting you about your business practices, i would make sure i get myself the advice of a good lawyer.
BTW – these “protection” laws apply to opt-in emails too. Utah wants you to screen your database every month, for a fee, to comply.