Matt Schwartz, a policy analyst at Consumer Reports, explained, “This bill is multifunctional in the way it both sheds light on the industry and gives consumers a data deletion right that’s usable.”
California Raises Data Broker Regulation : Penalties for Non-Compliance
The Delete Act reinforces these obligations with substantial penalties. The California Privacy Protection Agency is expected to vigorously pursue violations, including daily fines of at least $200 for failing to adhere to registration requirements and $200 per deletion request for each day without data scrubbing. This framework elevates the risk for numerous covered companies.
California Raises Data Broker Regulation : The Road Ahead
Though the full implementation of the Delete Act is still years away, companies must start preparing now. Uncertainties linger about the universal deletion mechanism’s operation, data collection after deletion requests, and identity verification.
As the effective date for deletion requirements approaches, the California Privacy Protection Agency is anticipated to dedicate more resources to data broker oversight. Companies outside of California should also monitor developments, as other states and federal lawmakers may follow suit.
