As others have noted, the EU’s GDPR does contain a Right to Delete. Some states have implemented the right on an individual basis, but it’s going to be difficult to implement on a national basis because of the current political climate. A nationwide federal privacy law was in the works, but it contained a poison pill in the form of federal preemption, meaning that it would set a hard ceiling for data privacy that states wouldn’t be free to exceed with their own legislation.

If you’ve got the time, I would encourage you to reach out to your representative in the state legislature to advocate for a state privacy law. You can point towards California’s CCPA or Colorado’s CPA as examples of already active privacy law. Companies are already supposed to be in compliance with these laws, but only with respect to consumers in those states. Point out that there shouldn’t be much (if any) additional burden to extend that protection to your state. Your state AG can’t enforce your privacy rights if they’re not enshrined in legislation.