I'd hope to see something like this at the national level, but state level is a good start.
Maybe it’s petty but I kind of like the idea of it being a morass of 50 different privacy laws so that a company has to tiptoe through a global minefield to sell data about me.