New state privacy laws creating complicated patchwork of privacy obligations
That or it forces companies to instead go for policies that broadly cover all states at once, so basically the strictest part of every state's laws.
I think this is a good thing. If all the different requirements are too much for a billion dollar company to handle, they should split into 50x 20 million dollar companies that can tailor to each state's privacy needs.