Following Europe’s lead, 12 states now, or soon will, require personal data practice assessments be conducted and documented, and be available for inspection (and California is considering mandatory filing requirements). Potential fines for noncompliance could be significant. The risks of other regulated or high-risk data practices like artificial intelligence, children’s data processing and digital health…