New law prohibits selling personal health data to insurance companies, bans social media platforms from requiring ID for account verification, and mandates businesses to delete former employees’ personal data.