Brands Should Brace for More States to Adopt Privacy Legislation