I feel that this law is gonna be as useless as the EU one. >Know what personal data is being collected about them. They can still be vague about it, also what is metadata. >Know whether their personal data is sold or disclosed and to whom. That is generally respected, but if it's a sub-firm of a sub-firm etc... it's pointless. >Say no to the sale of personal data. Yeah the SALE, not the exchange, again what is metadata. >Access their personal data. Technical not provable. >Request a business to delete any personal information about a consumer collected from that consumer. Technical not provable. >Not be discriminated against for exercising their privacy rights. Technical not provable.