California Passes Three New Internet Privacy Bills
California Gov. Gavin Newsom has signed three bills designed to strengthen online privacy for residents: AB 566, SB 361, and AB 656.
Key points
- AB 566 — Requires web browsers to provide a universal opt-out toggle that signals businesses not to sell or share users’ personal data, building on the California Consumer Privacy Act (CCPA) to move from per-site opt-outs to a single browser-level setting.
- SB 361 — Expands the Data Broker Registration Law (Delete Act), giving consumers more information about which personal data data brokers collect and who else may have access to it.
- AB 656 — Forces social media platforms to make account cancellation straightforward and ensures that canceling an account triggers full deletion of the user’s personal data.
Background & implications
The prior CCPA allowed users to opt out of third-party data sharing on a site-by-site basis; AB 566 creates a universal opt-out signal that browsers (like Chrome, Firefox, and Safari) must honor. Supporters say this will simplify privacy controls for consumers; critics have warned about scope and implementation. Gov. Newsom had vetoed a similar, broader bill last year that also covered smartphone OSs.
This legislation could significantly change how browsers, advertisers, and data brokers handle personal data and may prompt updates to browser privacy settings and industry practices.
Sources
- AB 566 bill text and details: LegiScan — AB 566
- California Senate Judiciary analysis (AB 566): sjud.senate.ca.gov — AB 566 analysis (PDF)
What do you think — will a browser-level toggle make managing privacy easier for you? Share your thoughts below.