State preemption should make this dead on arrival. When California just passed a data broker deletion bill and now 16 states have passed comprehensive privacy laws of their own while congress has their collective insane thumbs up their asses, it seems fucking crazy to ensure that the only way privacy legislation of the future can happen is if congress gets their shit together.