The measure would require businesses or other entities that control or process the identifiable data of more than 100,000 people to allow consumers to find out what data is stored about them, correct errors or request deletion. The measure would also set rules for facial recognition technology for both state and private users.