American legislation requires opt-out signals not to be the browser default

Can you site the legislation stating that?