Such naivete in covering CA data broker law (and jumping in carelessly). Unanswered questions: Who audits all of them, how, when, how frequently, with or w/o any notice? What are criminal law specifications in the bill that apply to violators? What are civil law specifications and/or limits on the infringed in the bill? What are criminal and civil punishment on the Gvt of CA and its employees in this system in case of violations that will inevitably happen? Who carries the cost of related (both against the businesses and Gvt of CA) legal costs in case of violations (Gvt runs the system, even if business violates it, it failed so it should bear any initial lawsuit costs untill it can be recouped from the business,...)? In short, this is ungovernable business and the only safe option is absolute, federal level ban. CA system lacks any trust to touch it with a 10ft poll.
