While everyone can agree on the need for cybersecurity standards, just who should set them is a matter of some debate. Though a federal standard for privacy and cybersecurity could make it easier for tech companies to conduct their day-to-day operations, the current patchwork of state laws could provide for more stringent enforcement and better protection for consumers.

Laura Moy, executive director of Georgetown Law’s Center on Privacy & Technology, believes that a federal standard that eliminates state laws surrounding cybersecurity could do more harm than good.