A new California law prohibits efforts to trick consumers into handing over data or money. A bill in Washington state copies the language.