The California Consumer Privacy Act (CCPA) established privacy rights for Californians in 2018.
The Delete Act expands privacy rights for Californians. Review the privacy law timeline for more details.
In 2023, the Legislature passed the Delete Act (Senate Bill 362, Chapter 709, Statutes of 2023).
Requirements
CalPrivacy must create a platform that:
- Allows consumers to submit a request to delete their personal information
- Provides these requests to all registered data brokers
- Is free and easy to access on their website
DROP is this platform.
Data brokers must:
- Register with CalPrivacy every year
- Process deletion requests submitted through the DROP system
- Report the types of information they collect and share
- Undergo audits to make sure they’re following the Delete Act
Data brokers who fail to comply may face penalties and administrative fines.
Learn more about data brokers.