California already requires sites to honor opt-out requests, but it hasn't spelled out a mechanism in the regulation itself. They might clear that up before a Jan 1, 2027 requirement for browser makers.