A proposed California law would require companies to default teens to “a high level of privacy protection,