Three states just sent a clear message to businesses: honor consumer privacy rights or expect an investigation. On September 9, California, Colorado, and Connecticut announced a coordinated privacy sweep targeting companies that are ignoring requests to stop selling or sharing personal data.