Prohibiting a certain controller from selling the personal data of a consumer to a purchaser who seeks to use the data for immigration enforcement; requiring a custodian of a public record to take reasonable steps to determine whether a public record is accessed for enforcing immigration law; requiring an entity that operates a certain message switching system to take certain actions regarding system access; requiring certain procedures of certain governmental entities to account for data containing sensitive attributes; etc.