California legislation · 2025-2026 Regular Session
California AB2561: Operating systems and applications: privacy settings.
Status: Chaptered, September 27, 2026
What the bill says
An act to add Chapter 23.1 (commencing with Section 22710) to Division 8 of the Business and Professions Code, relating to privacy. privacy Operating systems and applications: privacy settings. Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified…
From the chaptered text, September 27, 2026:
An act to add Chapter 23.1 (commencing with Section 22710) to Division 8 of the Business and Professions Code, relating to privacy. privacy Operating systems and applications: privacy settings. Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified. Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed. This bill would prohibit an operating system or an application from undoing a user’s affirmative configuration of a user’s privacy setting without the user’s consent, except as specified. The bill would define “privacy setting” to mean any user-configurable option within an application’s privacy, or similarly labeled, menu that governs the application’s collection, use, sharing, disclosure, retention, or processing of the user’s personal information. MAJORITY NO NO NO NO NO NO NO NO NO NO The people of the State of California do …