While states are likely to continue to pass Virginia-like data privacy laws, others may be inspired to follow a more recent, sector-specific approach from states like Arkansas or Washington.