On January 1, 2026, the complex map of US data privacy regulation gets three new critical layers. For global organizations, the "patchwork" of state-level