Over 20 states have active comprehensive data privacy laws, none of which give a broad private right of action, so why have companies been hit with approximately 4,000 privacy litigation filings since 2022? Two-party consent, and decades-old wiretapping laws.