Colorado and Virginia adopted state data privacy laws this year, while the Golden State’s voters in 2020 approved a measure to add tougher provisions to an existing law.