Malwarebytes
California just put people back in control of their data
California’s 2025 legislative session closed with 14 new privacy and AI-related bills, several of which were signed into law to give consumers more control over their data. Governor Gavin Newsom signed AB 656, which requires social media companies to make account cancellation straightforward and should ensure that deletion triggers the full removal of the user’s personal data. AB 566 introduces a browser-based opt-out signal to stop data sales or sharing, with an effective date set for January 1, 2027.
SB 361 strengthens data broker transparency and oversight by the California Privacy Protection Agency, with disclosures expanding to whether data is collected, sold, or shared with various actors; it becomes effective on January 1, 2026. The article notes that California often enacts consumer privacy bills on January 1 of the year after passage, unless updated guidance suggests otherwise. These measures collectively aim to give Californians greater visibility and control over their personal information online.