Delete Act

Article summary

The Delete Act (SB 362) is a California state law that provides a one-stop deletion mechanism—implemented through the California Privacy Protection Agency’s Delete Request and Opt-out Platform (DROP)—for consumers to direct data brokers to delete their personal information. The law requires data brokers to register with the California Privacy Protection Agency annually beginning January 2024, process deletion requests submitted through DROP beginning August 1, 2026, and undergo an independent audit every three years beginning January 2028. DROP became available to consumers on January 1, 2026. It was the first law of its kind to be passed and implemented in any jurisdiction. The bill has some exceptions, and allows consumers to exclude specific data brokers from the deletion request. It uses the same definition of data brokers as in the California Consumer Privacy Act, applying to companies which made more than $25 million in revenue the previous year, and which "annually buy, sell, or share the personal information of 100,000 or more consumers or households." that make more than 50% of their annual revenue from the sale of personal information. Once the request is made, data brokers are required to delete all personal information of the consumer every 45 days, and are banned from sharing or selling new personal information acquired about them.…

Key claims

No claims recorded.

Discussion questions

1. Summarise the article in your own words. Which single claim would you verify first, and why?
2. Which claim in this article is most likely to be revised as the sources update? How would you check its current status?
3. If two sources disagreed about one of these facts, what would you need in order to trust one over the other?

Bibliography

No sources recorded.