<< the key here is 3 years...just realized it >> Upon the signing of the bill, 'non-complaint' companies will have 3 years to comply.