[int_19h]

In WA, we had a similar problem with bump stocks.

See, the state banned them before the feds did. But unlike the feds, the state did the right thing and compensated the owners who surrendered theirs to the State Patrol (which required filling a form with a bunch of PII). That program was put together rather hastily due to the impending federal ban tho, and they didn't really consider the privacy angle.

Then they got two FOIA requests for all the submitted forms, one of which explicitly stated that it's to compile and publish the registry of former owners. The legislature actually had to scramble to pass another law to specify that data as private before the response was due.