In its message accompanying the final CCPA regulations, the California AG firmly told businesses that they must “treat user-enabled global privacy controls” as a valid CCPA request to opt out from the sale of personal information. It is still unclear, however, whether the familiar global privacy settings in major operating systems and device platforms like Apple, Google, Amazon and Roku already meet the AG’s standard. The Cybersecurity Law Report spoke to lawyers from Kelley Drye & Warren, ALC Inc., Lucid Privacy Group, the Network Advertising Initiative and the ACLU of Northern California about the AG’s statements on global opt-out, the advertising and marketing industry’s concerns about the provision, and the technological and practical feasibility of complying with it. See “Did Adtech Fix Its CCPA Problem? IAB’s GC Discusses New Contract for Data Sales” (May 27, 2020).