And that law has no effect on Google. Google doesn’t sell data to advertisers. It sells access to you. Meaning they aren’t going to send advertisers a list of 20-35 year olds who like action movies. Advertisers are going to ask Google to target their advertisements to that demographic.
I'm not 100% sure, but I think there are also data retention limits and opt-out requirements as part of that act. Some states have stricter rules as well.
