PHOENIX- Arizona does not have the protections California residents have when it comes to their personal information online. However, at least one professor said the new California law could set the stage for future change.

The sweeping new California law will allow residents to request what data companies have, where that data is being shared, and even ask for it to be deleted.

“It’s an incredibly strong tool and we are in the beginning stages of how that will play out.“ Adam Doupe, associate director of Center for Cybersecurity and Digital Forensics, said.

Arizona does not have any of these current protections in state law. Doupe said this allows companies to collect your personal information and create the equivalent of a personality profile on you.

"Who you are, what are your interests, what do you like to do. It's not necessarily nefarious, but it’s under the guise of how we best sell you some product.” Doupe said.

That information can extend beyond just the companies you originally give the information to. Websites can take your personal information and sell it to third-party groups, without your knowledge.

"Information is like a oil leak, once it’s out there you can’t put it back in the bottle.” Doupe said.

The California law does not go into full effect until 2020, giving time for Arizona or other states to pass similar legislation.