California Expands Data Deletion Rights Against Data Brokers

On October 10, 2023, California Governor Gavin Newsom signed into law SB-362, a measure amending existing California laws regulating data brokers and granting California residents the right to delete all personal information collected by the states' registered data brokers in a single request. These updates will simplify the ability of California consumers to exercise their deletion rights granted under the California Consumer Privacy Act (CCPA) at Ca. Civ. Code § 1798.105, at least when it comes to making data deletion requests to registered data brokers.

As detailed below, the amended law requires data brokers to report detailed information to the California Privacy Protection Agency (CPPA) regarding consumers' requests for deletion and the data broker's response to the same. This will mean that the CPPA will have significant oversight over data brokers' compliance with the CCPA's deletion requirements, as compared to compliance by other businesses subject to the