California just passed the toughest data privacy bill in the US