Back to California

AB-2561 • 2026

Operating systems and applications: privacy settings.

Operating systems and applications: privacy settings.

Privacy
Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
Valencia
Last action
2026-06-10
Official status
Read second time. Ordered to third reading.
Effective date
Not listed

Plain English Breakdown

Using official source text because the generated explanation was unavailable or could not be confirmed against the official bill text.

Operating systems and applications: privacy settings.

AB 2561, as amended, Valencia.

What This Bill Does

  • AB 2561, as amended, Valencia.
  • Operating systems and applications: privacy settings.
  • Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified.
  • Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed.

Limits and Unknowns

  • This entry is temporarily using official source text because the generated explanation could not be confirmed against the official bill text during the last sync.

Bill History

  1. 2026-06-10 California Legislative Information

    Read second time. Ordered to third reading.

  2. 2026-06-09 California Legislative Information

    From committee: Do pass. (Ayes 9. Noes 0.) (June 8).

  3. 2026-05-27 California Legislative Information

    Referred to Com. on P., D.T., & C.P.

  4. 2026-05-14 California Legislative Information

    In Senate. Read first time. To Com. on RLS. for assignment.

  5. 2026-05-14 California Legislative Information

    Read third time. Passed. Ordered to the Senate. (Ayes 77. Noes 0. Page 5039.)

  6. 2026-04-27 California Legislative Information

    Read second time. Ordered to third reading.

  7. 2026-04-23 California Legislative Information

    Read second time and amended. Ordered returned to second reading.

  8. 2026-04-22 California Legislative Information

    From committee: Amend, and do pass as amended. (Ayes 15. Noes 0.) (April 21).

  9. 2026-03-09 California Legislative Information

    Referred to Com. on P. & C.P.

  10. 2026-02-21 California Legislative Information

    From printer. May be heard in committee March 23.

  11. 2026-02-20 California Legislative Information

    Read first time. To print.

Official Summary Text

AB 2561, as amended, Valencia.
Operating systems and applications: privacy settings.
Existing law, the California Consumer Privacy Act of 2018, grants a consumer various rights with respect to personal information that is collected or sold by a business, as defined, including the right to direct a business that sells or shares personal information about the consumer to third parties not to sell or share the consumer’s personal information, as specified.
Existing law, beginning January 1, 2027, prohibits a business from developing or maintaining a browser, as defined, that does not include functionality configurable by a consumer that enables the browser to send an opt-out preference signal, as defined, to businesses with which the consumer interacts through the browser, as prescribed.
This bill would
require an operating system or an application to configure a user’s default privacy
setting to be the most privacy protective setting offered by the operating system or application and would
prohibit an operating system or an application from
changing
undoing a user’s affirmative configuration of
a user’s privacy setting without the user’s
explicit
consent.
The bill would define “privacy setting” to mean any user-configurable option within an application’s privacy, or similarly labeled, menu that governs the application’s collection, use, sharing, disclosure, retention, or processing of the user’s personal information.

Current Bill Text

Read the full stored bill text
Download Bill PDF