California has just passed a major upgrade to its privacy laws. With the signing of AB 566 (and companion bill SB 361), Californians will soon be able to opt out of third-party data sales or sharing through a browser setting or signal, rather than doing it site by site.

Under the new law, browsers like Chrome, Safari, and Edge will need to include a visible control for users to send a universal “do not sell or share my data” signal to all visited websites. That means once you check that box, you’re opting out across the board—not just for one site.

SB 361 strengthens the data broker registry, pushing for greater transparency: consumers will see who is collecting their data and how it’s being used. Together, these build on California’s existing CCPA/CPRA frameworks, making enforcement and user control simpler.

It’s not yet clear exactly how seamless the experience will be—for instance, how well websites will respect the browser signal—but it marks a strong step forward in reclaiming user privacy online.