The thicket of state-based privacy regulation in the U.S. grows thicker by the day, but Congress seems poised to step in with a bipartisan group that may propose legislation that preempts privacy law.