According to the Information Technology and Innovation Foundation (ITIF), it is estimated that, in the absence of Congress passing unified privacy legislation, the out-of-state costs of 50 such laws could exceed $1 trillion over 10 years, with at least $200 billion of that burden falling on small businesses.