logoalt Hacker News

vineyardmiketoday at 5:48 AM0 repliesview on HN

The "universal opt-out" bill really has no teeth on its own. Combined with the existing CCPA though, it has potential (CCPA is limited to sharing for cross-context behavioral advertising). It just says that browsers and mobile operating systems need to have an easy-to-find setting to signal that the user wants to opt out. The whole bill can basically fit in a tweet. No requirements on what the signal actually looks like, and no requirements that it's respected. There are other laws passed this week with more teeth.

Oh, and we don't have to worry about the "Cookie banner" problem, because a separate law (CCPA) requires a 12 month cooldown before prompting the user for opt-in consent again.

From the law, defining the signal:

> “Opt-out preference signal” means a signal that complies with this title and that communicates the consumer’s choice to opt out of the sale and sharing of the consumer’s personal information.

https://legiscan.com/CA/text/AB566/id/3117187

https://oag.ca.gov/privacy/ccpa