In a flurry of legislative activity, California has recently enacted a new and significant privacy law. Today, attention is drawn to the Delete Act (SB 362). Developed primarily to address data brokers – those entities that sell consumer information without a direct relationship – the Act illustrates California’s relentless commitment to consumer protection.
The Delete Act introduces unique provisions with far-reaching implications. Central to the Act is the idea of a “one-stop-shop” mechanism which mandates data brokers in California to allow consumers to delete their personal information. Additionally, the law requires adherence to enhanced registration and transparency requirements.
California’s bold steps in privacy legislation are not a recent development. The state has a history of implementing comprehensive privacy laws that serve as a model for other states. As a noteable example, the California Consumer Privacy Act (CCPA) has influenced other states to reevaluate their privacy legislation and consider additional protections for consumers.
That said, the unique aspects present in the Delete Act emphasize a very particular set of concerns. Specifically, the law takes aim at the frequently opaque practices of data brokers, entities that can often operate without the knowledge or direct consent of the consumers whose data they handle.
The Act’s provisions mean that these businesses will now be forced to provide a clear, streamlined process for consumers in California to remove their personal data. Moreover, with the new transparency requirements, data brokers will need to be forthcoming about the kind of data they gather and their purposes for doing so.
This is, undoubtedly, a significant development and one that legal professionals working on data privacy issues will need to carefully consider. As always, California continues to pioneer consumer privacy protections, crafting legislation that may well set the direction for future reforms across the nation and the globe.