What the law states targets percentage processors and you can offshore workers, maybe not individual Western users