Californians have a one-stop system to prevent their personal info from being sold. In the rest of the country, it’s more complex.