California launches ambitious data broker deletion system

In a recent meeting of the California Privacy Protection Agency (CPPA) Board, officials outlined the complexities and progress of the state's new data broker registration and deletion system, known as the DROP system. The project is currently navigating the Project Approval Life Cycle (PAL), a structured process mandated by the California Department of Technology that ensures IT projects are thoroughly vetted before approval.

The PAL process consists of four stages: business analysis, alternatives analysis, solution development, and project readiness and approval. Each stage requires extensive documentation and approval from the CDT, with the entire process typically taking two to five years. However, the CPPA aims to launch the DROP system by January 1, 2026, which presents challenges due to misalignment between the state budget timeline and the PAL process.

The board discussed the need for a budget augmentation to support the DROP system, which is funded through data broker registration fees. The proposed fee adjustment to $6,600 aims to cover the costs associated with developing and maintaining the system, which is estimated to require approximately $3.5 million. This adjustment reflects the need for the data broker industry to finance the system rather than relying on taxpayer funds.

Board members expressed enthusiasm for the project, highlighting its potential to set a national standard for data privacy and consumer protection. They acknowledged the importance of building the system with privacy protections in mind and ensuring that it is user-friendly for consumers.

Public comments included suggestions for improving the system's functionality, such as ensuring that data brokers do not directly contact consumers for verification and advocating for a more intuitive user interface. The CPPA is committed to addressing these concerns as it moves forward with the project.

As the meeting concluded, board members reiterated their support for the DROP system and the importance of maintaining transparency and collaboration among state agencies to ensure its successful implementation. The CPPA plans to keep the board updated on budgetary developments and regulatory discussions as the project progresses.