A case before the Illinois Supreme Court is looking like a key test of how companies are allowed to collect and use consumers' biometric information.
Facebook said in a long response to lawmakers that it had so-called integration partnerships with 52 companies, but it has ended most of them already.
The new privacy bill in California allows consumers to control what data companies collect from them and how that information is used.
A new data privacy act would allow consumers to stop companies from selling their personal data.
In a 5-4 decision, the Supreme Court said law enforcement needs to obtain a search warrant before it can access historical cell phone location records, but stopped short of making a ruling on how other types of third-party data collection should be handled.