Consolidate US legal info

index.html

@@ -416,6 +416,13 @@ <h3>United States Privacy Law</h3>
         rely upon informal guidance or enforcement actions to provide clarity on the scope of legal
         obligations around GPC signals.
       </p>
+      <p>
+        Other US state privacy laws, such as those in Virginia and Utah, give consumers new opt-out
+        rights around data sales and targeted advertising but are silent on the legal effect of
+        global opt-out signals. Regulators enforcing those statutes may determine that a user
+        activating a signal such as GPC may be sufficient to legally exercise opt-out rights in
+        those jurisdictions.
+      </p>
       <h3>Other Jurisdictions and Privacy Rights</h3>
       <p>
         GPC could potentially be used to indicate rights in other jurisdictions as well. For example, the
@@ -424,13 +431,6 @@ <h3>Other Jurisdictions and Privacy Rights</h3>
         legislation — often modeled on the GDPR; a regulator in one of those countries could determine that
         GPC invokes a legal right that requires some response from a recipient.
       </p>
-      <p>
-        Other US state privacy laws, such as those in Virginia and Utah, give consumers new opt-out
-        rights around data sales and targeted advertising but are silent on the legal effect of
-        global opt-out signals. Regulators enforcing those statutes may determine that a user
-        activating a signal such as GPC may be sufficient to legally exercise opt-out rights in
-        those jurisdictions.
-      </p>
       <p>
         However, GPC is not necessarily intended to invoke every new privacy right in every
         jurisdiction. For example, GPC is not intended to globally invoke data deletion rights on