Without giving everyone read rights, this is still pretty much “take their word for if”.

I have no doubt California businesses will immediately ship data outside California and play dumb.