The private right of action in the U.S. is a significant obstacle for states trying to enact comprehensive biometric privacy laws. In 2023, more state legislators were attracted to the issue, but many proposed bills have stalled or died in committee. Common provisions include exempting health care-related data, fines of $1,000 to $5,000 per violation, informed consent mandates, and profiteering prohibitions. The alternative to this is giving a state's attorney general sole authority to sue over biometric data abuses. An association of entrepreneurs, startup venture capitalists, and policy analysts called Engine wrote a report this year about patchwork privacy legislation, arguing that a single federal law governing this sector of the economy would be easier and cheaper. Five states that have enacted comprehensive biometric privacy laws have enacted comprehensive biometric privacy laws, with four offering no private right of action and the fifth offering a limited right.