The first thing coming up will be the enforcement of CCPA which starts June 1st. Just this week the California AG put out the final notes around that which should be finalized in the next 30 days. He also stated they're ready to enforce July 1. Brazil's LGPD would have been the next but has been delayed til next May.
In terms of what we'll see next is most likely not a specific law but what they'll start to enforce. I think Mobile enforcement will be the next big area of focus. Since GDPR has been launched its been somewhat ignored.
On top of that privacy is becoming a larger more important factor in the ecosystems of companies. Because of this privacy will become more of a checkbox. Getting better engagement and trust with customers will increase. Because of this they'll look for ways to better get consent from the end user.
For state laws there are upwards of 17+ individual state laws in effect. As more of those pass it will put pressure on a federal law here in the states. We probably wont see one pass until closer to half the states have something. Bills have been submitted in the last year but have somewhat died out.
