The RESTRICT Act suggests that there's political will in the US to solve the same problems that the GDPR solves. If the RESTRICT Act fails, the US might get federal-level privacy protection (subject to the PATRIOT Act, of course).