The California Consumer Privacy Act (CCPA) is no longer the only state data protection law on the block. Earlier this month, Virginia passed its Consumer Data Protection Act (CDPA), while the Oklahoma Senate advanced the state's fledgling privacy legislation to its House of Representatives. Back east, the New York Data Accountability and Transparency Act (NYDATA) is waiting in the wings. While it's true that many of these laws overlap on core tenants such as giving consumers notice before their data is collected or the ability to opt out of targeted marketing, there are enough minor variances to force companies to think twice about the status of their privacy compliance. In the absence of a federal privacy law, lingering questions about the protections afforded to employee data, or opting in and out, mean the difference between success and costly fines. Above, we look at five challenges posed by a rapidly expanding U.S. privacy landscape.