Newsom, in his veto letter to the legislature, said he was supportive of “protecting sensitive personal information of Californians,” but that a “categorical ban on sharing that information goes a step too far.”

The governor pointed to existing state laws that require businesses to give consumers the option to limit sharing their information and budget constraints that would hinder implementing and enforcing the law.

Newsom also signed a handful of other bills strengthening the state’s privacy rules:

• SB 923 expands the scope of the California Consumer Privacy Act to require businesses to delete all personal information they have on a consumer upon request, not just data collected directly from the consumer. Online-only businesses will be required to provide a webform or portal for deletion requests.

• AB 883 shortens the time with which data brokers must comply with a data deletion request from 45 to 30 days. It requires elected officials and judges receive information on how to access the deletion mechanism, known as DROP, to protect their information.

Other data privacy laws still awaiting Newsom’s signature or veto include:

• SB 690 would remove the private right to action for alleged violations under a wiretapping law, allowing just the state attorney general to pursue such legal challenges.

• AB 2561 would prohibit an operating system or application from re-adjusting a user’s privacy setting without consent.