Read the signed bill and you'll find a law that means absolutely nothing. As long as you don’t use the information “for the purpose of fraud, identity theft, or for any illegal purpose”, it doesn’t limit anyone from looking at your data (government or private).