What's Happening?
The Electronic Frontier Foundation (EFF) and its allies successfully prevented the expansion of California's age-gating law, AB 1856, which aimed to extend its reach from operating systems to web browsers. This expansion could have posed significant threats
to users' speech, privacy, and security online. The legislature ultimately removed the problematic language from the bill, also exempting open-source operating systems from its burdens. While the EFF still views the underlying age-gating law (AB 1043) as unconstitutional, they acknowledged the positive step taken by lawmakers in not broadening its scope. However, the legislative session also saw missed opportunities to enhance consumer privacy. AB 2564, a bill supported by EFF to prohibit surveillance pricing—where corporations offer different prices based on personal data scrutiny—stalled on the final day. Additionally, AB 322, which would have restricted the collection, use, and sale of location data, also failed to pass, leaving California behind other states that have enacted similar protections.
Why It's Important?
The successful halt of the age-gating law's expansion is crucial for digital rights in California, as it prevents potential restrictions on internet browsing and protects open-source communities from undue burdens. Had it passed, the law could have forced users to provide more personal information for age verification, centralizing data in corporate hands and potentially infringing on free expression. The failure of bills like AB 2564 and AB 322, however, highlights a significant gap in California's consumer privacy landscape. Surveillance pricing and unchecked location data collection allow corporations to exploit personal information for profit, leading to discriminatory practices and increased vulnerability to government surveillance. This outcome means Californians remain exposed to pervasive commercial surveillance, impacting their economic well-being and personal autonomy. The state's inability to pass these measures also signals a lagging approach compared to other states that are actively implementing stronger data privacy protections.
What's Next?
Looking ahead, the EFF anticipates continued legislative efforts to address digital rights in California. They expect further attacks on the California Invasion of Privacy Act (CIPA) in the next legislative session, as Governor Newsom's signing statement for SB 690 (which weakened CIPA's private right of action) called for 'additional work in this area.' This suggests ongoing attempts to limit consumer's ability to sue corporations for unlawful metadata surveillance. Additionally, legislation concerning automated license plate readers (ALPRs) is expected to be a priority, with advocates pushing for robust safeguards or outright bans on mass surveillance. The results of a state audit into California's fusion centers, expected by Summer 2027, will also likely influence future legislation regarding law enforcement surveillance. Furthermore, 'zombie bills' related to the use of copyrighted material for AI training are expected to return, and numerous bills addressing AI vulnerabilities, security, and existential risks are anticipated.
Beyond the Headlines
The legislative outcomes in California reflect a broader national tension between technological innovation, corporate interests, and individual privacy rights. The debate over age-gating laws, while framed as child protection, often raises concerns about censorship, free expression, and the potential for increased data collection across all users. The failure to pass stronger commercial surveillance protections underscores the persistent challenge of regulating data-driven business models that thrive on collecting and monetizing personal information. This legislative inertia could lead to a fragmented privacy landscape across the U.S., where citizens in some states enjoy robust protections while others remain vulnerable. The ongoing legislative battles highlight the need for a comprehensive and forward-thinking approach to digital rights that balances safety, innovation, and fundamental freedoms, rather than piecemeal solutions that often fall short of addressing systemic privacy challenges.
