At least three states are trying to replace the online privacy rules nixed by Trump