Governor Signs Groundbreaking Privacy Bill Making It Easier for Californians to Protect Their Personal Data

What happened

Governor Gavin Newsom signed the California Opt Me Out Act (AB 566) on 21 October 2026. The law requires browsers operating in California to provide an easy‑to‑use opt‑out preference signal (OOPS) that automatically tells websites not to sell or share a user’s personal information. The requirement closes a gap in the California Consumer Privacy Act by making the signal widely available. The law becomes effective in January 2027. The California Privacy Protection Agency will oversee implementation and public education.

Why it matters

Browser vendors must add OOPS controls and ensure sites honor the signals, while marketers should adjust data‑collection workflows to respect automatic opt‑outs.

Business impact

Web browsers will need to redesign UI and backend to emit OOPS, incurring development costs; websites that ignore the signal could face consumer backlash and potential regulatory scrutiny.

Checklist

• Add OOPS UI to browsersCritical priority

  Implement a built‑in opt‑out preference signal that users can enable with a single click.

• Update website privacy handlingHigh priority

  Configure servers to detect and respect OOPS signals, halting data sale or sharing for opted‑out users.

• Test signal transmissionMedium priority

  Run end‑to‑end tests to verify OOPS signals are correctly sent by browsers and received by websites.

• Notify users of new controlsMedium priority

  Publish clear guidance on how users can enable OOPS in supported browsers.

Who reported it

Discussion