California continued its role as a privacy first-mover in recently enacting three first-of-their-kind laws strengthening online privacy protections. First, California extended minors the right to remove content the minor posted up until their 18th birthday. The right is limited to content posted by a minor and does not cover content posted by others about the minor. Second, the California Online Privacy Protection Act was amended to require disclosure of how websites and online services respond to Do Not Track or similar signals expressing a consumer’s choice regarding tracking across the Internet. Finally, the California breach notification statute was updated to include breaches of user names and passwords even where no other personal information was breached.