California takes a first step towards worker data rights