Once a state other than California (which is the devil to the right) or Texas (which is the devil to the left) have a solid law on the books, others will jump on board.

At that point, the feds will make something happen and claim that it was their idea. Then we'll have a single protection law.

Until then we'll have various agencies interpreting existing laws in the context of new technologies, which are ultimately decided via lawsuits. You know, like we have had for a decade or so.

my guess is that EU/GDPR will eventually force us to come up with something, pay attention to the area, and assert our global dominance. the way we're continuing to fight/hate China seems like the first entry point into some kind of federal data laws.