California proposes guidance for privacy law