I don’t see how these small state specific regulations can work. California is the only state big enough, and the EU as a whole does GDPR type regulations uniformly. Regardless of what they regulations are, I feel like it needs to be US federal level regulation to make compliance practical