Similar to the CCPA, this act will require companies to allow their customers to access, change, or delete their personal data. They will be able to opt out of the use of non-sensitive data for targeted advertising. In addition, companies will need to obtain consumers’ consent before they gather and process data, such as information on health, religious beliefs, race, immigration status, or sexual orientation, as well as geolocation info and biometric data. Still, revisions are expected to be made by 2023 before the bill goes into effect.