California has led the way as state legislatures grapple with how to protect the vast amount of data citizens share online every day. In the absence of federal policy, a variety of tactics are being explored in states.