In a newfound approach to privacy legislation, the California Delete Act has successfully passed the legislature and now awaits the Governor’s approval. Mentioned in a report by Husch Blackwell LLP, it is stipulated that the California Delete Act necessitates all data brokers to register with the California Privacy Protection Agency (CPPA) as early as the coming year. It also mandates adherence to a consumer deletion mechanism by 2026. The new regulations have the potential to significantly shift the practices of data brokers in a more privacy-focused direction.
The Delete Act, technically known as SB 362, is not a standalone law. Instead, it amends California’s pre-existing data broker law to impose new registration and disclosure requirements on all data brokers. Similarly, firms will need to put in place a one-stop mechanism for consumer deletion requests, empowering consumers with more control over their data.
To highlight, a ‘data broker’ under the law’s ambit is a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship. The passing of this act signals California’s intensified efforts to protect consumer data privacy in an increasingly digital age. It joins a growing list of state-driven privacy laws that seek to nudge businesses towards more ethical engagement with consumer data.
When officially signed into law, the provisions of California’s Delete Act will have far-reaching implications on how businesses handle consumer data. It will compel data brokers to rethink their approach to data collection and selling practices, driving organizations to adopt much-needed transparency measures. Moreover, the act could influence additional legislation or regulatory changes nationwide, prompting a more comprehensive approach towards data privacy in the US.
Considering the increased focus on data privacy and protection globally, keeping an eye on shifts like these in privacy laws will be crucial for businesses and legal professionals alike. Progress in this arena is likely to set new standards for data handling, collection, and disposal across industries.