In California, an initiative expected on November’s ballot would be one of the broadest online privacy regulations in the U.S.