How long do you think such a sweeping privacy law would take to plan, write, and pass? Do you think they'd get it right? What might the fallout of such a law be?
It will take couple years, but many global companies have already faced that with Europe's GDPR legislation. Only problem with GDPR is, that fines seems to be too low.