Now that California Gov. Gavin Newsom has signed a bill defining the legal obligations of data brokers into law, businesses that serve people in the Golden State will have to meet a new set of processes to safeguard consumers’ personal privacy. The new law consolidates California-specific processes under a state agency established by prior privacy legislation.
The California Delete Act, formally called “Data Broker Registration: Accessible Deletion Mechanism” (SB362), updates the state civil code to add and modify sections that pertain to data brokers to clarify such entities’ responsibilities and processes. The new law also moves enforcement of data broker obligations from the California District Attorney’s office to the California Privacy Protection Agency.