California's new law empowers consumers to delete personal data

California is set to enhance consumer privacy rights significantly with a new phase of its ambitious privacy regulations taking effect on August 1. On this date, data brokers will be required to process requests from state residents to delete their personal information, a mechanism designed to return control over data that is collected and sold by numerous companies.

The new tool enabling this process is called DROP, created to operationalize the Delete Act. This legislation expands the privacy rights of Californians, allowing them to request the removal of their personal data held by more than 600 registered data brokers through a single, simplified request. The California Privacy Protection Agency (CalPrivacy) confirmed that this system is the first of its kind globally.

The primary goal of the DROP platform is to streamline a process that previously demanded individual requests to each company. With DROP, one action reaches all state-registered data brokers at no cost to the user. The law also aims to give consumers greater control over the commercialization of their personal information. Beyond deletion, the regulation prohibits data brokers from selling or sharing new consumer data, with limited exceptions.

Senator Josh Becker, the author of the Delete Act, stated that the law's purpose is to help individuals regain control over their personal information. He explained that it allows them to remove their data from intermediaries that collect their most private details. California joins a select group of states, including Oregon, Texas, and Vermont, that mandate the registration of data brokers, further strengthening the regulatory landscape for data privacy.

“

I wrote this law to help us regain control of our personal information. It allows us to remove our data from these intermediaries that collect our most private information.