we might be somewhat trending in this direction, but the reality is largely that the US states are pretty identical and have very similar laws on the books. the federal government is in charge of commerce usually.

most laws like CCPA also have some threshold where you already need to be pretty successful for it to apply to you.

for some select industries (biometrics & healthcare), yes you have a patchwork of laws.