It's also still bound only to companies in CA. I'm in GA, I don't have to comply, for example, if I were making operating systems. People REALLY need to push back when governments try to extend their reach beyond their borders, like EU regulations. The more we let them the more enshrined in law it will become. We have the right and duty to say no, that only applies in your jurisdiction.