It could take three years before the impact of any legislation takes full effect. Meanwhile, companies can do whatever they want with a technology that, in the words of one Big Law partner, “poses an existential threat.”