California’s new data privacy law is the nation’s toughest. Here’s what it will and won’t do to help you control the use of your data online.