California lets residents block data sales. Here’s how it works and why other states may soon follow this privacy shift.