The US’s California Consumer Privacy Act came into force in January this year, but enforcement against technology companies did not begin until this month