A new law in California that took effect January 1 limits the ability of rent-to-own companies to install spyware that could monitor a customer's every move.