Bill Full Text
Home
-
Bills
-
Bill
-
Authors
-
Dates
-
Locations
-
Analyses
-
Organizations
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250AB__256199INT</ns0:Id>
<ns0:VersionNum>99</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2026-02-20</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>AB</ns0:MeasureType>
<ns0:MeasureNum>2561</ns0:MeasureNum>
<ns0:MeasureState>INT</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Assembly Member Valencia</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Valencia</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title> An act to add Chapter 22.9 (commencing with Section 22683) to Division 8 of the Business and Professions Code, relating to privacy.</ns0:Title>
<ns0:RelatingClause>privacy</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Operating systems and applications: privacy settings.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified.</html:p>
<html:p>Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed.</html:p>
<html:p>This bill would require an operating system or an application to configure a user’s default privacy setting to be the most privacy protective
setting offered by the operating system or application and would prohibit an operating system or an application from changing a user’s privacy setting without the user’s explicit consent.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>NO</ns0:FiscalCommittee>
<ns0:LocalProgram>NO</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_611DED82-FEDE-496D-8CBA-7D4CC782733E">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:type="locator" ns3:href="urn:caml:codes:BPC:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'8.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'CHAPTER'%20and%20caml%3ANum%3D'22.9.'%5D)" ns3:label="fractionType: LAW_SPREAD||commencingWith: 22683">
Chapter 22.9 (commencing with Section 22683) is added to Division 8 of the
<ns0:DocName>Business and Professions Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawHeading type="CHAPTER" id="id_B06F4C2A-0D8B-4DCC-A4DB-1EB59B5E53EB">
<ns0:Num>22.9.</ns0:Num>
<ns0:LawHeadingVersion id="id_59A6666D-A3F5-4F19-A564-E891BA9B0002">
<ns0:LawHeadingText>Operating System and Application Privacy Settings</ns0:LawHeadingText>
</ns0:LawHeadingVersion>
<ns0:LawSection id="id_B248E8AC-26B4-4C9E-841A-FDF9AE06A1B6">
<ns0:Num>22683.</ns0:Num>
<ns0:LawSectionVersion id="id_C85972FD-B9FF-4E7E-A2ED-8CF40CCA5295">
<ns0:Content>
<html:p>As used in this chapter:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Application” means a software program, mobile app, or desktop app that collects, processes, or stores personal information about a user in the state and that provides privacy settings allowing the user to control the collection, use, sharing, or disclosure of that personal information.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Personal information” has the meaning defined in Section 1798.140 of the Civil Code.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Privacy setting” means any user-configurable option within an application that governs the application’s collection, use, sharing, disclosure, retention, or processing of the user’s personal
information.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
<ns0:LawSection id="id_1AEAFD84-9E44-4E4A-A561-669D90A737E0">
<ns0:Num>22684.</ns0:Num>
<ns0:LawSectionVersion id="id_46AC6E17-F8A6-4D35-953D-4495296C7E4F">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
An operating system or an application shall configure a user’s default privacy setting to be the most privacy protective setting offered by the operating system or application.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
An operating system or an application shall not change a user’s privacy setting without the user’s explicit consent.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:LawHeading>
</ns0:Fragment>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>