California just passed one of the toughest data privacy laws in the country