CA AB3119

Redefines "share" to mean transferring personal information to another business or third party without requiring monetary consideration, while "sell" specifically means sharing for monetary or other valuable consideration.

Requires businesses to obtain affirmative opt-in consent before sharing consumer personal information, with consent requests kept separate from other permissions and decline options equally prominent as consent options.

Prohibits businesses from collecting, sharing, retaining, or using personal information unless reasonably necessary to provide requested services, prevent fraud/security threats, or comply with court orders.

Establishes 12-month waiting period before a business can request opt-in consent again if a consumer declines, and allows consumers to withdraw opt-in consent at any time through readily available means.

Lowers age threshold for parental consent from 16 years to 13 years for sharing minor consumers' personal information.