About the Course
Introduction
This CLE webinar will examine the practical impact of California's "Opt Me Out Act" (AB 566) on CCPA/CPRA signal compliance, advertising and analytics integrations, and enterprise risk. AB 566 requires browsers to provide a native, easy-to-locate opt-out control by Jan. 1, 2027, while today businesses already must honor a valid universal opt-out signal, e.g., Global Privacy Control under the CCPA/CPRA.
Description
Starting Jan. 1, 2027, AB 566 requires mainstream browsers to ship an easy, built-in opt-out privacy control. Many more users will send the signal, more often, across more devices. That spike in volume and visibility makes low-hanging fruit for enforcers and plaintiffs of any site that still fires third-party tracking or engages in sale/sharing in the presence of the opt-out signal.
The usual defenses of "we didn't get the signal," or "users can't find the setting" disappear once the browser toggle is native and easily discoverable. This will enable sweeps and simple browser-based tests. Downstream vendors must pass that opt-out through their own systems to any sub-vendors. If a company's vendor contracts fail to require honoring and propagating the opt-out, that company faces liability and indemnity exposure.
The impact is that a small change in regulated browsers under AB566 creates a potentially large operational liability risk for nearly every consumer-facing business and their counsel.
Listen as our panel of privacy counsel and technical experts examines the statute and related CCPA/CPRA regulatory landscape, discusses best practices for readiness, triaging issues, and advising clients on navigating enforcement and litigation risk as AB 566's browser mandate approaches.
Presented By
Focusing her practice on the intersection of law and technology, Ms. Jaworski advises clients on enterprise-wide data privacy and cybersecurity governance, incident response, data breach and class action defense, and related government investigations. She works with clients to implement new technologies, including AI/ML and automated decision-making tools, and to evaluate privacy and security requirements in Web3 and the metaverse. Ms. Jaworski represents clients in defense of data breach class actions, privacy torts and statutory claims, pixel tacking and commercial surveillance matters, internet defamation, technology disputes, and cyber subrogation claims. She also defends clients in response to regulatory inquiries and investigations arising out of data incidents and privacy practices. As a proactive compliance advisor, Ms. Jaworski works with clients to operationalize enterprise-wide data privacy and cybersecurity programs, in compliance with state, federal, and international laws and regulations. Of particular importance, she works with clients to mitigate potential privacy risks and ethical biases, and to provide audit and assessments of business use of AI/ML and automated decision-making tools. Her clients include major E-commerce retailers, international news media companies, global manufacturers and retailers, healthcare organizations, and financial entities. Ms. Jaworski is a Certified Information Privacy Professional, United States (CIPP/US) and a Certified Information Privacy Professional, Europe (CIPP/E) as certified by the International Association of Privacy Professionals (IAPP). She was also a Trial Attorney with the U.S. DOJ.
Mr. Stockburger partners with emerging and established clients around the globe to strategize about how they can best leverage data and talent to grow, operate, and protect their business. With a focus on data privacy and security, he works with clients of all sizes and maturity to build and shore up their privacy and security programs, deploy technology, enhance compliance and stakeholder confidence, take new products to market, work through data governance and retention challenges, navigate workplace disputes, and harness emerging technologies such as artificial intelligence. Mr. Stockburger is a frequent author and lecturer on data privacy and security and related issues.
-
This 90-minute webinar is eligible in most states for 1.5 CLE credits.
-
Date + Time
- event
Thursday, February 19, 2026
- schedule
1:00 p.m. ET./10:00 a.m. PT
I. AB 566 in context: from CCPA/CPRA signals to browser‑level opt‑out
II. CCPA/CPRA requirements and how AB566 will impact companies: volume, visibility, risk
III. Technical readiness: guidance beyond corporate counsel's office
IV. Contracting and vendor oversight
V. Records, testing, and evidence: showing compliance, defending in audits or litigation
VI. Best practices now and operationally
VII. Practitioner takeaways
The panel will cover these and other important topics:
- AB 566's 2027 browser mandate and how it amplifies existing CCPA/CPRA duties
- Vendor contract impact: service‑provider restrictions, downstream prohibitions, attestations, and audit rights
- Maintaining evidence‑grade logging and testing to prove tag suppression and downstream blocking
- Best practices to prepare, make operational, and defend
Related Courses
AI Capability Claims Under Fire: Preparing and Responding to Securities, FTC, and Consumer Litigation Risk
Thursday, January 22, 2026
1:00 p.m. ET/10:00 a.m. PT
Recommended Resources
