Lexology December 28, 2023
On October 10, 2023, California Governor Gavin Newsom signed SB 362 into law. The “Delete Act” is intended to bridge a gap in consumer privacy rights – whereas the California Privacy Rights Act (the CPRA) grants consumers the right to request deletion of personal information collected directly from them, the Delete Act creates pathways to request deletion of data collected by data brokers indirectly or in aggregate form from other sources.
The Delete Act aligns more closely with CPRA requirements than existing data broker laws. Prior to the passage of the Delete Act, only California and Vermont had enacted laws specifically targeting data brokers. See Cal. Civ. Code §§ 1798.99.80-88, Vt. Stat. Ann. tit. 9, §§ 2446-2447. However, these laws...