On March 6, the California Privacy Protection Agency (CPPA) proposed amendments to the data broker registration regulations pursuant to the California Delete Act that would introduce new definitions and requirements for data brokers. The California Delete Act requires the CPPA to establish “an accessible deletion mechanism [that would] allow a consumer, through a single verifiable consumer request, to request that every data broker that maintains any personal information delete any personal information related to that consumer.”
The amendments would create a new accessible deletion mechanism called the “Delete Request and Opt-out Platform” (DROP) and would require data brokers to create a DROP account pursuant to the requirements set out in the revised regulations, including paying an initial access fee. The amendments would also prescribe certain parameters for data brokers in processing consumer deletion requests and subsequently reporting the status of such deletion requests. The CPPA published a presentation summarizing the new requirements for data brokers and is planning for a 2026 launch after it promulgates final regulations.
