▪ Since 2018, 34 states have passed or introduced 72 privacy bills regulating the commercial collection and use of personal data.

▪ These laws create significant compliance costs for in-state businesses and confusion for consumers while also raising costs for out-of-state businesses that increasingly find themselves subject to multiple, duplicative rules.

▪ State privacy laws could impose out-of-state costs of between $98 billion and $112 billion annually. Over a 10-year period, these out-of-state costs would exceed $1 trillion.

▪ Small businesses would bear $20–23 billion of this out-of-state burden annually.

▪ Congress should pass federal privacy legislation that preempts states, protects consumers, and promotes innovation.