Well, kind of. The law technically goes into effect on Jan 1, but the CA Attorney General is not allowed to enforce it until July 1. This was part of a compromise brokered around the fact that it's taken a long while to nail down the final wording of the law. While some companies are already compliant, others are taking this as a grace period to get their act together. Which is necessary because of the short timeline.

As far as I'm aware, the actual text of the regulation is still not finalized. The most recent update to the text was in October, but the AG office was gathering public feedback in early December. They still haven't released their findings from the feedback. The October version was more a Release Candidate, if you will.