State enforcement of U.S. consumer privacy protection laws and the collaboration between state privacy agencies are both intensifying, but some companies have been distracted by integrating AI tools and are failing to properly invest in privacy compliance. The landscape of states currently enforcing comprehensive privacy laws has expanded to 17, with three additional state laws set to take effect in 2026. This article distills commentary from regulators in California, Colorado, Delaware and Indiana, as well as a recent member of the Texas AG’s Office, delivered during IAPP’s Privacy. Security. Risk. 2025 conference, on enforcement priorities, responding to regulatory inquiries and how enforcers are coordinating. See “State AG Representatives Disclose AI Regulatory and Enforcement Outlook” (Oct. 8, 2025).