Overview

• AB 656 mandates that deleting a social media account be clear and that the action triggers full deletion of the user's personal data.
• SB 361 expands the Data Broker Registration Law by requiring more disclosure about what brokers collect and who can access it.
• AB 566 requires browsers to include a setting that sends a global opt-out preference signal to block third-party data sales across sites.
• The bills were signed during San Francisco Tech Week 2025, with state leaders emphasizing consumer control over personal information.
• The new laws build on the CPRA and last year’s Click to Cancel measure, with the DELETE Act’s single-interface deletion system slated for August 2026.