A statewide directive calls on police agencies to protect certain personal information, but not everyone is on board