Lexology December 12, 2025
As has often been the case in recent years, California enacted a bevy of new data privacy and AI bills into law in 2025. This note reviews the highlights of the 2025 legislative session and discusses several of these new laws, many of which will become effective in the new year:
- SB 446 (modifying data breach notification) effective January 1, 2026
- AB 45 (health and location data) effective January 1, 2026
- AB 566 (mandating browser opt-out preference signals) effective January 1, 2027
- AB 1043 (digital age assurance) effective January 1, 2027
- AB 656 (governing social media account deletion procedures) effective January 1, 2026
- SB 361 (regulating data brokers) effective January 1, 2026
These and other new enacted privacy...







