California’s Tough New Privacy Law and Its Biggest Challenges