The CPA covers targeted advertising and certain types of data-based profiling as well. Data-holding entities will be required to address consumer requests within 45 days and display privacy ...