US state privacy fines reached $3.425 billion in 2025