Legis
Technology
AB 2561, Chapter 478, Statutes of 2026 · Sunday 27 September 2026

Operating systems and applications: privacy settings

California bars operating systems and apps from reversing a user’s chosen privacy settings without consent.

The law protects users from having privacy choices silently overridden after they set them. It preserves controls over how apps handle personal information.

What the law does ​

  • Prohibits operating systems and covered applications from undoing a user’s affirmative privacy-setting choice without the user’s consent.
  • Allows overrides when required by state or federal law, a court order, or an individual-case subpoena.
  • Permits businesses to discontinue services, apps, data practices, or privacy options when protections stay the same or become stronger.

Who it affects ​

  • Operating-system providers.
  • Software, mobile-app, and desktop-app providers that collect, process, or store Californians’ personal information and offer privacy controls.
  • California users of those applications.