California has been busy passing a multitude of new internet laws as we’ve outlined in a few previous blog posts.  The most recent law made us pause here at NMR because it directly affects the individuals we help everyday both in understanding and writing terms of use and privacy policies for internet users, creators, and tech startups.  Privacy policies are critical tools for website creators to protect themselves from liability and try to set consumer expectations for privacy on their website.

Under A.B. 370, all commercial websites that collect personally identifiable information are now required to disclose how they respond to “Do Not Track” (DNT) signals in their privacy policy.  Before we get into the practical application of this law, it’s important to understand what DNT is and what it isn’t.