The bill is weak because businesses could effectively punch holes in it by saying, "If you don't agree to all if this, we will simply close your account."

I don't think the bill covers deduced information, such as the conclusion that you are pregnant, or gay, or disabled, based on tracking your interests. But I can't be sure about that.

In addition, it covers only disclosure to other businesses, not disclosure to the forces of potential repression. It would not make me feel safe with collection of data about me. I want to be free to do things anonymously.

One detail: it says the company must give you a chance to refuse distribution of data about you to other companies. But if it distributes data to 3 other companies, does it have to let you say yes or no to each other company?

Suppose one company is Facebook, one is Google, and one is your insurance company. You need to permit giving the data to your insurance company. If the options offered to you are yes-yes-yes and no-no-no, you can't approve that without also approving distribution to Facebook and Google too.