Im not sure if it qualifies in the US but over here in the UK we have the Data Protection Act. Now im sure it only covers personal information and finnancial information, but surely any history regarding any online movement or record of IP regitration on any site or server would be considered personal information? Maybe its time for another one of those infamous changes in the law.
