Over the course of the last few years, the U.S. has seen state governments grapple with crafting comprehensive data privacy laws as more businesses leverage new privacy-concerning technology such as artificial intelligence and biometric tools.

Because the U.S. lacks of a blanket law like the European Union’s General Data Protection Regulation (GDPR), many businesses subject to a sprouting patchwork of laws across states. Currently, four states have comprehensive data privacy laws, with only one in effect. Similar data privacy laws are pending in 17 other states, according to the IAPP’s state privacy legislation tracker.