California Opt Me Out Act, AB 566: Managing Renewed CCPA and CPRA Signal Compliance Risk

This CLE webinar will examine the practical impact of California's "Opt Me Out Act" (AB 566) on CCPA/CPRA signal compliance, advertising and analytics integrations, and enterprise risk. AB 566 requires browsers to provide a native, easy-to-locate opt-out control by Jan. 1, 2027, while today businesses already must honor a valid universal opt-out signal, e.g., Global Privacy Control under the CCPA/CPRA.

Starting Jan. 1, 2027, AB 566 requires mainstream browsers to ship an easy, built-in opt-out privacy control. Many more users will send the signal, more often, across more devices. That spike in volume and visibility makes low-hanging fruit for enforcers and plaintiffs of any site that still fires third-party tracking or engages in sale/sharing in the presence of the opt-out signal.

The usual defenses of "we didn't get the signal," or "users can't find the setting" disappear once the browser toggle is native and easily discoverable. This will enable sweeps and simple browser-based tests. Downstream vendors must pass that opt-out through their own systems to any sub-vendors. If a company's vendor contracts fail to require honoring and propagating the opt-out, that company faces liability and indemnity exposure. 

The impact is that a small change in regulated browsers under AB566 creates a potentially large operational liability risk for nearly every consumer-facing business and their counsel.

Listen as our panel of privacy counsel and technical experts examines the statute and related CCPA/CPRA regulatory landscape, discusses best practices for readiness, triaging issues, and advising clients on navigating enforcement and litigation risk as AB 566's browser mandate approaches.