CPPA Applauds Introduction of Bill to Expand Access to Opt-Out Preference Signals

SACRAMENTO – Assemblymember Josh Lowenthal introduced AB 3048, sponsored by the California Privacy Protection Agency, that would require browsers and devices to offer consumers the ability to exercise their privacy preferences through opt-out preference signals.

“We thank Assemblymember Lowenthal for introducing this important legislation requiring browser vendors to allow consumers to easily exercise the privacy rights guaranteed by California’s best-in-the-nation privacy law,” said Ashkan Soltani, Executive Director of the California Privacy Protection Agency. “All Californians have the right to object to the sale and sharing of their personal information via opt-out preference signals, but most Californians are unable to avail themselves of these important rights because the tools they use to navigate online do not communicate their privacy preferences. It’s high time these vendors let consumers take full advantage of their rights.”

California’s landmark privacy law, the California Consumer Privacy Act (CCPA) gives California consumers the right to stop the sale and sharing of their personal information, including via opt-out preference signals. Businesses receiving these signals are required to honor them as a valid opt-out of sale and sharing.

Yet, Google Chrome, Apple Safari, and Microsoft Edge, which occupy over 90% of the desktop browser market, do not offer support for these signals.

“While many of the smaller browser vendors, such as Duck Duck Go, Brave, and Mozilla, offer built-in support for opt-out preference signals, most popular browsers, such as Google Chrome, Apple Safari, and Microsoft Edge do not,” said Maureen Mahoney, Deputy Director of Policy & Legislation for the California Privacy Protection Agency. “Browsers have had years to offer these signals, but many have neglected to do so. It’s time that Californians have meaningful access to them.”

This bill seeks to make it easier for consumers to operationalize their privacy rights. Since hundreds, if not thousands, of businesses collect consumers’ personal information as they browse online, it is difficult, if not impossible, for consumers to opt-out at each business one-by-one. This bill will help address that problem by requiring browsers to support the ability for consumers to exercise their opt-out rights in a single step.

Currently, eight states, including California, require businesses to honor browser privacy signals as an opt-out of sale of their personal information. If this bill is passed, California would become the first state to require browser vendors to directly support these signals, which would have sweeping benefits.

Learn more about opt-out preference signals.

ABOUT US

The California Privacy Protection Agency is committed to promoting the education and awareness of consumers’ privacy rights and businesses’ responsibilities under the California Consumer Privacy Act. Individuals can visit privacy.ca.gov to access helpful and up-to-date information on how to exercise their rights and protect their personal information. In addition, the Agency’s website provides important information about CPPA board meetings, announcements, and the rulemaking process.

Contact: press@cppa.ca.gov