Recent state data privacy laws had started to align with Virginia's approach—which itself took its cues from a failed Washington state law—offering a temporary relief to companies collecting user data across the country. But that relief may have been short lived as the Hydra of data privacy regulation adds a couple of more heads.