California is doubling down on its commitment to digital privacy. Governor Gavin Newsom has signed two new bills—AB 566 and SB 361—into law, giving residents stronger control over how their personal data is collected and used online. The move expands the state’s existing California Consumer Privacy Act (CCPA), first introduced in 2018, which gave consumers the right to know, delete, and restrict companies from selling their personal information.
The new laws aim to simplify the process of managing digital privacy and increase transparency among data brokers. They mark another milestone in California’s ongoing efforts to set the national standard for consumer data protection.
A Simpler Way to Opt Out of Data Tracking
One of the biggest changes comes with Assembly Bill 566, which will introduce a browser-level privacy control that lets users opt out of data collection across all websites with a single setting. Instead of clicking through endless cookie banners or privacy pop-ups, Californians will be able to control their data preferences directly through their web browser.
This feature will send an automatic opt-out signal to every website a person visits, telling companies not to sell or share their personal data. In practice, this could mean the end of repetitive, confusing consent menus that have frustrated internet users since privacy laws first went into effect.
The idea is to make privacy protection effortless—more like checking a box in browser settings than navigating pages of legal text. While the details of how the feature will work are still being finalized, privacy advocates view it as a major step toward reducing the burden on individuals and holding companies accountable for respecting users’ preferences.
Fixing Flaws in the Original CCPA
When the California Consumer Privacy Act became law six years ago, it was hailed as a breakthrough for data rights. It forced companies to disclose what personal data they collect, why they collect it, and with whom it’s shared. But in practice, many users found it difficult to take full advantage of those rights.
Each website required users to manually adjust privacy settings—often through confusing pop-ups or misleading buttons that pushed them toward accepting data collection. These dark patterns made opting out a chore rather than a right.
The new law addresses this weakness by moving privacy controls out of websites and into browsers themselves. Once browsers integrate this opt-out mechanism, Californians will only have to set their preference once. This change could also ripple across the internet, influencing how tech companies handle privacy nationwide, given California’s size and influence in the digital economy.
California’s Privacy Enforcement Continues to Grow
California has steadily expanded its privacy enforcement framework over the years. The Attorney General’s office currently oversees CCPA enforcement, issuing penalties against companies that violate user rights. In recent cases, several firms—including one in the agricultural sector and another in health information publishing—faced fines exceeding a million dollars for alleged data misuse.
In 2020, the state also created the California Privacy Protection Agency (CPPA), the first of its kind in the United States. Often described as a “privacy watchdog,” the agency is tasked with overseeing compliance, investigating violations, and ensuring that privacy laws evolve alongside new technologies. Together, the Attorney General and CPPA make California one of the few states with dedicated institutions focused on protecting citizens’ digital rights.
Tightening Oversight on Data Brokers
The second bill, Senate Bill 361, targets data brokers—companies that buy and sell consumer information, often without people realizing it. These firms collect data from public records, online activity, and even social media profiles, compiling detailed digital portraits of consumers.
SB 361 strengthens the state’s data broker registry, requiring these entities to disclose more about what kinds of data they collect and who has access to it. The goal is to give consumers greater transparency into an industry that has historically operated out of sight. With this law, Californians will be able to better understand how their data moves through the marketplace.
