The problem with the US, and we're already seeing it play out with things like CCPA (California's GDPR-like privacy legislation), is that it is difficult to get momentum and bi-partisan support for sweeping changes in Congress. It either is watered down or gets deadlocked, so you end up in a situation where you have patchwork legislation, often conflicting in scope, state-by-state. I wouldn't expect much to change in the short to medium term.