Delete Act

Common card · No. 232430

The Delete Act (SB 362) is a California state law that provides a one-stop deletion mechanism—implemented through the California Privacy Protection Agency’s Delete Request and Opt-out Platform (DROP)—for consumers to direct data brokers to delete their personal information. The law requires data brokers to register with the California Privacy Protection Agency annually beginning January 2024, process deletion requests submitted through DROP beginning August 1, 2026, and undergo an independent audit every three years beginning January 2028. DROP became available to consumers on January 1, 2026. It was the first law of its kind to be passed and implemented in any jurisdiction. The bill has some exceptions, and allows consumers to exclude specific data brokers from the deletion request. It uses the same definition of data brokers as in the California Consumer Privacy Act, applying to companies which made more than $25 million in revenue the previous year, and which "annually buy, sell, or...

Read on Wikipedia