Can this work as a state law?

I could see the EU implementing it as part of its ongoing privacy/transparency efforts, but I doubt the US Congress would be of any help.