Am I missing something? This is a California law, no?
Who is this "we" you speak of? Defacto-laws degrade my concept of structure in society.
It is a California regulation, yes. I suspect that OP is making reference to the fact that as California goes, often so goes the national policy. Or, at least that's how it's played out with regularity in the past.
CA is 14.6 of US GDP and 12% of the population. It's hard to have a large business in the US that doesn't have $25m revenue or handle the information of 100k CA residents, so there is very broad applicability.