CaliforniaCaliforniaLawAB 566
California Opt Me Out Act
Requires web browsers to include a consumer setting that sends an opt-out preference signal to businesses, beginning January 1, 2027.
Signed by the governor; Chapter 465, Statutes of 2025Oct 8, 2025 1 year ago
- Body
- California Legislature
- Session
- 2025-2026
- Introduced
- Feb 12, 2025
- Takes effect
- Jan 1, 2027in 7 weeks
- Votes
- Assembly 53-1, Senate 31-7, Assembly concurrence 57-3
- Sponsors
- D (Democrat)Democrat
- Topics
- Privacy
Timeline
Oct 8, 2025 1 year ago
Sep 10, 2025 1 year ago
Jun 5, 2025 1 year ago
Feb 12, 2025 1 year ago
Sponsors
- D (Democrat)Assemblymember Lowenthal
Related
Mental Health Professionals: Artificial Intelligence
Would limit the use of AI in psychotherapy services to administrative or supplementary support and bar training models on psychotherapy data in ways inconsistent with confidentiality law.
Wearable technology privacy bill
This bill would have regulated wearable technology devices to address privacy concerns.
Consumer Privacy: Deletion Requests
Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.
Data Brokers: Deletion Mechanism: Elected Officials and Judges
Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.
Online Services Accessed by Children
Repeals the enjoined Age-Appropriate Design Code Act and replaces it with similar duties requiring online services likely to be accessed by children to take reasonable steps to prevent specified risks of harm.
Delete Act
Requires data brokers to register with the California Privacy Protection Agency and to process consumer deletion requests submitted through a single state-run deletion mechanism.
California Age-Appropriate Design Code Act
Requires online services likely to be accessed by children to assess and mitigate risks to children and to configure default privacy settings to a high level of privacy.
CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits
Regulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.