Between 2020 and 2024, 20 states enacted comprehensive data privacy laws, and many observers assumed 2025 would see continued proliferation.