Several of these proposed laws will actually allow citizens to sue businesses for privacy violations. Many of the laws have no restriction on the size of the business or geographical location. The laws are designed to “outsource” compliance to citizens armed with lawsuits. This produces a multiplier effect for business risk. In addition to fines and other enforcement actions, a cottage industry of lawsuits is on the horizon.