I'm hopeful here in Illinois we'll support this. We already have BIPA (Biometric Information Privacy Act) which has already been used against tech companies.

As it is, CCPA is pushing essentially companies to start treating the US like it is also under GDPR and the like. A complicated privacy landscape in the United States is fine: It will force companies to collect as little data as humanly possible for fear of running across one state or anothers' privacy laws.