The new law will require web browsers to include an easy, universal way for users to opt out of data collection and sales.