Two more states passed comprehensive consumer privacy laws this quarter.

Compliance programs must account for varying opt-out mechanics.