Almost half the US states have passed comprehensive consumer data privacy protections that go beyond federal health privacy rules, known as Health Insurance Portability and Accountability Act (HIPAA).