California’s New Privacy Law Faces Its First Big Challenge