Although the US has no federal privacy law, European-style privacy protections have caught on at the state level. California has taken the lead, with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). As other state capitals consider their roles, will they join California in passing GDPR-style regulations?