While cybersecurity and privacy are increasingly becoming top of mind for regulators, a federal data privacy bill still appears some time away from passing, allowing states and federal agencies to step in to fill the void.