An independent privacy audit found that Google, Microsoft, and Meta continue tracking users even when they click 'reject cookies' on websites, potentially violating California's privacy laws. The finding matters because cookie opt-outs are how consumers currently attempt to control data collection — if they don't work, users have no meaningful way to protect their privacy online. The audit specifically targeted California web traffic, which means the violation could expose these companies to significant fines under state law.