California's Delete Act: A New Era for Data Privacy Rights
California's groundbreaking Delete Act platform lets residents erase their data from scores of brokers. Companies must adapt to a new compliance challenge.
Key points
- California's Delete Act lets residents request data deletion from over 600 brokers starting August 1, 2023.
- More than 300,000 Californians registered for the service by June 2023.
- Companies must adapt quickly or face compliance challenges with the new law.
What does the Delete Act do?
The Delete Act allows California residents to request the removal of their personal data from over 600 registered data brokers. This is done through a centralized platform known as the Delete Request and Opt-out Platform (DROP), which is managed by the California Privacy Protection Agency. When it launches on August 1, 2023, the platform will allow users to make a single request that brokers must honor, covering data such as Social Security numbers, email addresses, and browsing histories.
How will companies handle this change?
Companies that collect and sell personal data, known as data brokers, must comply by processing deletion requests through DROP. They must check the platform every 45 days to identify and act on new requests. John Pavolotsky, a partner at Stoel Rives, warns that companies unprepared for these changes will face challenges. Compliance involves setting up a DROP account, conducting data retrieval tests, and paying fees.
| Task | Deadline | Requirement |
|---|---|---|
| Register with DROP | January 1, 2023 | Brokers need to register |
| Begin processing | August 1, 2023 | Start handling deletion requests |
| Regular checks | Every 45 days | Identify new requests |
Will this change affect other states?
California's initiative might inspire similar actions across the U.S., as its policies often set a precedent. The state's economic size often means its laws have broader impacts, similar to vehicle emission standards and previous privacy laws. If the rollout of DROP proves successful, other states may implement similar platforms, enhancing data privacy nationwide.
Common questions
What should California residents expect?
Residents can expect an easier process to delete their data from numerous brokers at once. This could reduce spam and enhance personal cybersecurity by minimizing data exposure.
How are companies preparing?
Some companies have already started compliance protocols, but those starting late might struggle. The state provided resources like testing sandboxes for brokers to practice handling data requests.
Why is this important?
The Delete Act empowers individuals to control their data, reducing risks associated with data breaches and unwanted data sharing. It enhances privacy and could set a standard for future data protection laws.
