There is a good explanation of the proposed privacy legislation, American Data and Privacy Protection Act, now in the US Congress.
I was a bit confused because the author started comparing existing legislation. But, the proposed bill would preempt state law: voiding state laws which provide more protection to consumers.