I know next to nothing about California law, but it seems like this would be extremely aggressive towards what's essentially a huge industry in California. Privacy concerns also seem to me to be less important in the US - if anything there might be a preference for the storage of data due to stuff like the Patriot Act?
Then again, California has the capability to surprise.