CPRA requires a regulation be adopted to establish a standard where a business could considers request for information beyond the 12-month time period to be impossible. Once regulation is finalized, a consumer will be permitted to request the business disclose information beyond the 12-month period.