Any day now, we might see a fifth state, Connecticut, join the patchwork of comprehensive consumer data privacy laws around the country. With it, attorneys are starting to see a fuller picture of where pending legislation in other states might be headed, and a model that is emerging to be most popular, except, of course, in its hometown: Washington state.

Although it did not pass the state legislature, the significance of Washington’s People’s Privacy Act (PPA) is largely that it created a framework, albeit with variations, for Virginia’s privacy law, and subsequently those in Colorado, Utah, and now Connecticut.