California privacy law kicks in