California Data Privacy Law Nabs Sephora, Sets Stage for Future