Morning Consult cited an ITIF report showing that, if a law similar to California’s or the European Union’s General Data Protection Regulation were implemented on the federal level, American businesses overall could anticipate spending $7.2 billion in compliance costs to provide consumers with the right to data access, deletion, data portability and rectification.