For the first time, Californians can demand that hundreds of data brokers permanently delete — and keep deleting — their personal information. Here’s how this landmark law could reshape privacy rights