Prohibiting a certain controller from knowingly selling the personal data of a consumer to a certain governmental unit that has engaged in or supported civil immigration enforcement under certain circumstances; requiring a custodian of a public record to take reasonable steps to determine whether a public record is accessed for enforcing immigration law; requiring an entity that operates a certain message switching system to take certain actions regarding system access; etc.