Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified.

Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed.

This bill would require an operating system or an application to configure a user’s default privacy setting to be the most privacy protective setting offered by the operating system or application and would prohibit an operating system or an application from changing a user’s privacy setting without the user’s explicit consent.