The California Consumer Privacy Act, the most aggressive consumer-privacy law in the country, goes into effect Jan. 1. Even if your dealership is outside California, you should review your practices to ensure your customers' privacy is protected.