In a recent government meeting, the board announced the approval of final regulations related to the DELETE Act, aimed at enhancing consumer privacy and regulating data brokers. The regulations are set to provide clarity for both the data broker community and consumers regarding the handling of personal information in data marketplaces.
The DELETE Act, officially known as SB 362, mandates the establishment of a centralized platform called the Delete Request and Opt Out Platform (DROP). This platform will allow California consumers to submit deletion requests for their personal information from registered data brokers through a single, verifiable request. The initiative is touted as a pioneering effort, potentially the first of its kind both nationally and internationally, akin to the existing Do Not Call registry.
During the meeting, board members expressed gratitude for the extensive public engagement that informed the development of the DROP system. This engagement included surveys and discussions with data brokers, consumer advocacy groups, and the general public, which provided valuable insights into industry practices and consumer expectations.
The DROP platform will be free for consumers and designed to ensure secure submission of personal information. It will allow users to track the status of their deletion requests and will be accessible to individuals with disabilities. Data brokers, on the other hand, will be required to register annually, pay associated fees, and process deletion requests every 45 days starting in August 2026.
The board emphasized the importance of stakeholder input in shaping the platform, which aims to balance consumer rights with the operational realities of data brokers. The timeline for implementation includes a launch in January 2024, with additional reporting requirements and independent audits for data brokers set to begin in subsequent years.
Overall, the meeting underscored a significant step towards enhancing consumer privacy rights in the digital age, reflecting a growing recognition of the need for transparency and accountability in data handling practices.