The state of data privacy in the U.S. is not unlike a Rube Goldberg device.

Instead of passing a comprehensive federal statute in one fell swoop à la the EU, the country seems keen on racking up state-specific laws one by one, each slightly different from the other, complex in their own ways, and building toward what is often dubbed as a patchwork.