The measure in Washington state is the first U.S. privacy law to contain a “private right of action” provision since 2008.