State laws are moving in this direction, providing simpler rules restricting certain uses and transfers of personal data, and we can expect coverage of privacy rules for all Americans. This will allow privacy policies to return to core function, inform how data is treated.