State lawmakers on Tuesday advanced eight industry-backed bills aimed at limiting the reach of the California Consumer Privacy Act, signaling that in the Assembly at least the 2018 law giving customers more control over their data will likely be a ceiling for privacy changes, not a floor.

The Assembly Committee on Privacy and Consumer Protection approved measures allowing retailers to continue collecting customers’ information through loyalty card programs and authorizing businesses to maintain records about their workers. Other bills granted carve-outs to the insurance industry and dropped restrictions on gathering “de-identified” or aggregate customer data.