California just passed a major privacy law that will make it harder for Facebook and Google to track people and gather data

Authored by businessinsider.com and submitted by PAsInPsychology

California voters just passed Proposition 24, a ballot measure that expands the state's existing privacy laws and scales back the amount of data that big tech companies are allowed to collect on people.

The law will make it harder for Facebook and Google to track people's activity through third parties, which could make much of the tech giants' advertising business models obsolete, experts told Business Insider.

While Prop 24 is active only in California, it will effectively apply to all of the US because of the state's huge influence on the tech industry.

Visit Business Insider's homepage for more stories.

A new law passed by California voters in the November election will set an unprecedented standard for digital privacy in the US, making it harder for big tech companies like Facebook and Google to track people's data.

The Consumer Privacy Rights Act, also known as Proposition 24, was on track to pass in California as of Wednesday morning, with 56% of voters supporting the measure and over three-quarters of ballots counted.

The law will strengthen existing privacy measures in California, allowing consumers to stop businesses from selling or sharing their personal information, including race, religion, genetic details, geographic location, and sexual orientation.

It will also set tighter restrictions on how websites track your data to sell that information to advertising partners. Google and Facebook — two of the largest players in online advertising — both gather personal data collected by third-party websites to strengthen their advertising products, which make up the bulk of their revenue.

Prop 24 could effectively block companies like Facebook and Google from continuing to collect that data, which could change their business models and cut into their existing revenue streams, privacy-compliance experts told Business Insider.

"The third-party adtech industry will need to evolve ... otherwise, their business models risk becoming obsolete," said Heather Federman, the vice president of privacy and policy at BigID, a data-privacy compliance firm.

A Facebook spokesperson did not provide comment when reached by Business Insider. A Google spokesperson did not immediately respond to Business Insider's requests for comment. Neither company has publicly taken a stance on Prop 24.

The law comes as online-ad giants' business models are facing other new threats. Apple is planning an iPhone software update that will let users opt out of ad trackers, which Facebook has vehemently protested. Web browsers including Chrome, Safari, and Firefox are rolling out similar tools to let users opt out of tracking, which could cut into advertisers' revenue.

Prop 24 will become enforceable in 2023. Before that happens, California regulators are expected to provide more details about how it will be enforced, which could shape its influence on major tech companies.

Despite its potential to hurt the ad revenue of major tech companies, Prop 24 gained support from several tech business leaders who advocate privacy, including former Democratic presidential candidate Andrew Yang, who said the law was necessary to give people more control over their data.

Raju Vegesna, the chief evangelist at the global software firm Zoho, said he expected both private companies and governments to continue to crack down on third-party ad trackers because of growing privacy concerns from consumers. Vegesna added that Zoho removed third party trackers from its sites in July.

"That means we leave money on the table, but just because it's there doesn't mean you have to take it," Vegesna said in an email to Business Insider. "The privacy tipping point for most countries will come when they realize just how much data big tech companies such as Google have collected on their citizens and that as a government, there is nothing they can do about it."

Some privacy advocates have said the law doesn't go far enough, calling instead for Congress to pass privacy legislation that sets a single standard nationwide. Advertising trade groups have voiced similar complaints, Adweek reported — they say more laws should be passed to protect consumer privacy but that those laws should instead be drafted at the national level.

tornato7 on November 4th, 2020 at 20:00 UTC »

I voted no on this proposition after reading the ACLU analysis of the law, as it seems like a step in the wrong direction. Here are some highlights:

Under current law, companies have to respect people’s privacy choices when they use a “global opt-out” to indicate that their personal information should not be sold. But Prop 24 makes respecting this choice optional for companies, letting them force consumers to manually opt-out separately on each website and app they use

Prop 24 adds a new exception so companies can scrape information from social media sites and other sources

There is a new exception in Prop 24 allowing companies to refuse requests for information the company has collected or generated about consumers based on vague claims that something in that information might be proprietary or somehow valuable to the business

bobtheflob on November 4th, 2020 at 19:53 UTC »

No we didn't. I voted against it because while it talked about creating more privacy restrictions, it doesn't actually accomplish very much. Notably, organizations such as the EFF did not endorse the measure. There was also almost no funding by tech companies to defeat this proposition because they weren't very concerned about it.

Suolucidir on November 4th, 2020 at 19:37 UTC »

Except they didn't. California already had such a law, but it took 3 years to go into effect - in 2020.

This new law also takes 3 years to go into effect and invalidates the previous one.

So, California will wait until 2023 now.

In addition, the new law requires consumers to notice when their data is being stolen and take the time to report it. Whereas the previous law allowed the government to enforce privacy rights in behalf of citizens without a formal complaint from the citizens.

--

Edit: Think I have something wrong? Ok. Don't take my word for it - I am just an anonymous Reddit user, after all. I probably have something not quite right. Here are the experts explaining the problems with this bill, some of which I mentioned: https://www.youtube.com/watch?v=DuWspeTzOA0