Ballot measures were approved in California to restrict commercial use of user data and in Michigan to require warrants for searches of electronic information.