Yes, it's a bit hard to take them seriously as a US company. (I wonder would it matter if they were CA based instead of NY? Does the CCPA provide some better ef

Yes, it's a bit hard to take them seriously as a US company. (I wonder would it matter if they were CA based instead of NY? Does the CCPA provide some better effective data protection - at least awareness, similar to the GDPR? And does NY have something similar?)