The main disagreement: if consumers will be able to delete their data or whether the law would give companies ways to wiggle out.