A state law banning commercial use of prescription audit data is meant to protect physicians' privacy. But its effects on industry could be potentially damaging, as Warren Ross discovers