Is the Federal Government Playing a Role in Protecting Personal Information?

There is in much talk of the administration doing something about TikTok. But dragging their heels and so states have started to step in or individual institutions, particularly in the education side of things. Is that the right way to deal with this? I think what just recently happened with banning it within governments' employees is a solid one.