Data privacy has long been top of mind for policymakers, but in the absence of a comprehensive federal privacy framework, states have been passing their own unique privacy laws. That’s created pressure on policymakers in Washington to create national rules. When policymakers think about writing new rules for how companies can interact with consumer data, they often have only the practices of bad actors or the largest Internet companies in mind.