California's privacy law was supposed to be a model. Then lobbyists got to work. (Protocol)