AB 3048: California Consumer Privacy Act of 2018: opt-out preference signal.

The California Consumer Privacy Act of 2018 (CCPA) grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumers personal information, as specified. The California Privacy Rights Act of 2020, approved by the voters as Proposition 24 at the November 3, 2020, statewide general election, amended, added to, and reenacted the CCPA and establishes the California Privacy Protection Agency (agency) and vests the agency with full administrative power, authority, and jurisdiction to enforce the CCPA.

This bill would prohibit a business from developing or maintaining a browser that does not include a setting that enables a consumer to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser and would, 6 months after the adoption of certain regulations by the agency, prohibit a business from developing or maintaining a mobile operating system, as defined, that does not include a setting that enables a consumer to send an opt-out preference signal to businesses with which the consumer interacts through the mobile operating system. The bill would authorize the agency to adopt regulations as necessary to implement and administer those provisions, including to update the definitions of browser and mobile operating system to address changes in technology, data collection, obstacles to implementation, or privacy concerns. The bill would make these provisions operative on January 1, 2026.

This bill would declare that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.