"Protects" you. It just gives some penalties to the companies for gross negligence, kind of like the GDPR is trying to do for all of personal data in the EU.