California Legislature Advances Bill to Make it Easier to Exercise Privacy Rights

SACRAMENTO – The California Privacy Protection Agency (CPPA) commends the California State Legislature for passing AB 3048, authored by Assemblymember Josh Lowenthal. The bill, sponsored by CPPA, requires browsers to support opt–out preference signals (OOPS), allowing users to opt out of the sale or sharing of their personal information in a single step. The bill now heads to the Governor for his consideration.

“We thank the Legislature for passing AB 3048, a landmark bill that makes it significantly easier for Californians to exercise their opt–out rights online,” said CPPA Executive Director Ashkan Soltani. “This is another example of California innovating to protect consumers and promote trust in the digital marketplace.”

California is currently one of approximately a dozen states requiring businesses to honor consumer privacy requests made through opt–out preference signals in their browser and devices. If signed, California will be the first state to require browsers and mobile operating systems to offer consumers the ability to exercise these rights.

“The California Consumer Privacy Act requires businesses to honor opt–out preference signals from consumers,” said Maureen Mahoney, Deputy Director of Policy & Legislation. “AB 3048 makes those opt–out preference signals easily accessible to many more consumers by requiring browsers, including the ones most commonly used by Californians, to offer this option to their users.”

AB 3048 requires all browsers, including Google Chrome, Apple Safari, and Microsoft Edge, to support OOPS. It also requires mobile operating systems to support OOPS, pursuant to a rulemaking by the CPPA – which will enable consumers to opt out of sale and sharing by smartphone apps in a single step.

Businesses receiving these signals must honor them as valid opt–outs of sale and sharing in accordance with existing law. Thousands of businesses collect consumers' personal information as they browse online, making it difficult for consumers to opt–out since they must exercise their right on each business's website. Using an OOPS automatically sends the signal on the consumer's behalf, making opting out much simpler for Californians.

Learn more about opt–out preference signals.

About Us

The California Privacy Protection Agency (CPPA) is committed to promoting the education and awareness of consumers' privacy rights and businesses' responsibilities under the California Consumer Privacy Act.

Individuals can visit privacy.ca.gov to access helpful and up–to–date information on how to exercise their rights and protect their personal information. In addition, the Agency's website provides important information about CPPA board meetings, announcements, and the rulemaking process.