Regulating the Data Market: The Material Scope of American Consumer Data Privacy Law