All of those rights or stronger are already in effect in the EU since last year, which means most companies doing online business already have to comply with them. In fact it's pretty clear that Yang mostly just copied GDPR with this whole proposal. I'm not complaining, it's a great law if you're for consumer protection.
Many companies already provide the option to download all data, and I've written GDPR data request mails to multiple US based companies with success. Mostly you get the data in JSON files (without schema).
Right now, many companies are trying as hard as they can to skirt the law, but there's land mark cases happening already that will hopefully put an and to that soon [1].
[1]: https://techcrunch.com/2019/10/01/europes-top-court-says-act... ironically, techcrunch is a prime example of a "tracking cookie consent" popup that is absolutely illegal and will hopefully get them huge fines once the data protection agencies have their hands less full with bigger fish (google, facebook, etc).