Regulatory Watch  /  California  /  New law
Moderate impactNew lawSigned

California Governor signs four privacy bills expanding deletion rights, privacy settings, data‑broker rules and limiting CIPA lawsuits

Governor Gavin Newsom signed SB 923, AB 2561, AB 883 and SB 690 into law during the 2026 session. SB 923 broadens CCPA deletion rights and requires online request mechanisms; AB 2561 bars operating systems and apps from changing privacy settings without consent; AB 883 shortens data‑broker deletion request processing to 30 days and promotes DROP awareness; SB 690 removes the private right of action for certain pen‑register and trap‑and‑trace claims under CIPA.

Why it matters: The new statutes significantly strengthen consumer deletion rights, tighten data‑broker obligations, protect user‑controlled privacy settings, and curtail a class of privacy‑related lawsuits.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
California Enacts New Privacy Legislation Affecting Consumer Rights, Data Brokers, and Website Tracking Litigation
Covington Inside Privacy · primary source · Oct 14, 2026
Details
JurisdictionCalifornia
RegulatorCPPA
LegislatureCalifornia State Legislature
LawCalifornia Consumer Privacy Act (as amended by CPRA)
StatusSigned
PublishedOctober 14, 2026
Effectivenot stated
OrganisationsCalifornia Governor Gavin Newsom
Topicsdeletion, opt out, consent, privacy, tracking, data brokers, transparency
Datapersonal, sensitive