In the absence of a broad federal privacy law, states have been stepping up in the past couple of years to fill in the gaps and regulate the field. While most have followed a similar, comprehensive approach, others such as Maine have focused on regulating specific data collection by internet service providers (ISPs). But whether that more targeted approach could still catch on remains unclear.