A sweeping measure that would create a new agency for enforcing privacy laws, it rewrite the Consumer Privacy Act, exempt some of the largest tech companies from appropriate oversight, and add burdens to low-income and people of color to protect their own personal information from being sold.