[aerotwelve]

> No private right of action in any of those, which means it’s up to the states to enforce the laws.

These laws are nearly worthless when they cannot be enforced by regular people. Laws such as these will be used as weapons by partisan attorneys general who will wield them to settle scores with companies that they don't like. When an organization that they do like violates a state privacy law, no action will be taken against them.

If they actually cared about data privacy, they would have written the law to be more like the TCPA, which can be enforced by anyone.