State of California. Shine the Light law, Cal. Civil Code § 1798.83 (full-text).
The law is intended to provide California residents with information about how companies share personal information for direct marketing purposes. The statute applies to companies with more than 20 employees who hold any personal information on California residents (including, but not limited to, email address, medical information, customer retail transaction records) and share it with third parties for the third parties' marketing purposes. Third parties include any separate legal entities, even other members of the same "corporate family." Penalties for non-compliance run from $500 to $3,000 per violation.