Also, California has put a more stringent law on the books in 2011: http://www.privacylives.com/california-passes-bill-to-prohib...