Also, it does nothing for people who aren't in California.
California's law is much better than nothing, but it's not as good as the GDPR and the GDPR isn't really adequate.