California's new law may help raise the digital privacy bar