[digging]

> It seems very expensive for every single business to have a compliance lawyer specifically for this task of complying with each state's mandates to a tee.

It is. I've worked in healthcare, and it's not uncommon to have very specific requirements. However, there's no obligation to geolocate your customer beyond a simple request for their zip code, so it doesn't get too difficult from an engineering standpoint.