California's new privacy law could cost companies $55B to get in compliance