California Assembly Bill 370 (AB 370) amended the California Online Privacy Protection Act (CalOPPA) by requiring businesses to disclose how they respond to Do Not Track signals. The law was effective January 1, 2014.
AB 370 requires companies to address:
- How they respond to a browser signal such as Do Not Track (DNT), or any other mechanisms that provide consumers with the ability to exercise choice
- Whether other parties may collect data through the website/online service
- What type of data is collected, how that data is used, and whether collected data is shared or transferred to third parties
- What third parties, actively or passively are collecting data through a website or online service and the purpose of that collection