Actually, Americans expect their Congress to write laws to protect personal information, as well as other rights. Since they have failed US, the governors need to do it.