As the U.S. grapples with the absence of federal privacy law, state-level regulations have become the de facto standard for protecting personal data. At the center of this transformation is Andrew Kingman, a leading privacy attorney and lobbyist who has quietly shaped much of the legislation that now governs how companies handle sensitive information. From Vermont to Minnesota, Kingman has steered negotiations to balance consumer rights with business needs. His pragmatic approach focusing on enforceable standards illustrates how policy compromises are forged in America’s complex privacy landscape.