The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.

This bill would prohibit a business from developing or maintaining a browser that does not include a setting that enables a consumer to send an opt-out preference signal to a business businesses with which the consumer interacts through the browser and would would, only upon adoption of certain regulations by the agency, prohibit a business from developing or maintaining a device mobile operating system, as defined, through which a consumer interacts with a business that does not include a setting that enables the consumer to send an opt-out preference signal to that business pursuant to regulations adopted by the California Privacy Protection Agency. business. The bill would also authorize the agency to adopt regulations as necessary to implement and administer those provisions, including to update the definitions of “browser” and “device” “mobile operating system” to address changes in technology, data collection, obstacles to implementation, or privacy concerns.

This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.