The states at the forefront of consumer privacy legislation