A new report says states' new AI legislation may follow the pattern of comprehensive consumer data privacy laws seen in recent years.