Delete Request and Opt-Out Platform (DROP) rules will take effect Jan. 1, the same day that the accessible deletion platform goes live, the California Privacy Protection Agency announced at the CalPrivacy Board’s meeting Friday. Also at the meeting, CalPrivacy General Counsel Philip Laird walked the board through a presentation on how consumers and data brokers will interact with DROP.
Data Brokers and Delete Acts
Data brokers aggregate and sell personal data—often without clear user awareness. In response, many U.S. states are passing “delete acts” and other laws to increase transparency, require registration and give users control over data sales. These laws will reshape compliance and collection practices for brokers and companies relying on third-party data. This page tracks legislation, rulemaking and enforcement trends affecting the data brokerage industry.
California Privacy Protection Agency legislative staff is closely watching potential preemption efforts on Capitol Hill while developing possible bills to tighten the California Consumer Privacy Act in its home state’s legislature, said an agency official during the CalPrivacy Board’s meeting Friday. The proposed bills would add whistleblower protections, require alternative methods for submitting consumer privacy requests and expand California’s deletion right to cover all personal information collected about a consumer.
CHICAGO -- Work in the House on a national privacy bill has continued even during the government shutdown, Venable’s Michael Signorelli said during a panel Tuesday at the Association of National Advertisers (ANA) ad law conference. But with a year to go until the 2026 midterm elections, timing could be a problem, the privacy and advertising attorney said. “The calendar is no one’s friend right now.”
SAN DIEGO -- The right to delete seems simple, maybe deceptively so, though California's new Deletion Request and Opt-Out Platform (DROP) is attempting to reduce complications, panelists said during IAPP's privacy and security conference Friday.
SAN DIEGO -- States, especially those with consumer privacy laws coming online soon, are bolstering their privacy and consumer protection enforcement by beginning to onboard additional attorneys and technologists, experts said during a panel at IAPP's privacy and security conference Friday.
SAN DIEGO – “Privacy should be easy” for businesses to implement and consumers to effectuate, said Tom Kemp, executive director of the California Privacy Protection Agency (CPPA), during the closing keynote at IAPP's privacy and security conference Friday. At a panel Thursday, other CPPA employees spoke about regulations aimed at making privacy and privacy rights easier.
The right to cure in Oregon's comprehensive privacy law sunsets -- and a universal opt-out requirement dawns -- in two months, Oregon DOJ warned businesses in an October enforcement report released Wednesday.
Nvidia continued using cookies to track user browsing activities despite consumers opting out, said a class-action complaint Friday at the U.S. District Court for Northern California. The tech company's behavior is an “egregious privacy violation and total breach of consumer trust,” said the complaint (case 5:25-cv-09160).
Privacy Daily is providing readers with the top stories from last week, in case you missed them. All articles can be found by searching the title or clicking on the hyperlinked reference number.
The California Privacy Protection Agency could have a decision from the state's Office of Administrative Law (OAL) on Delete Act regulations just in time for the CPPA board's Nov. 7 meeting.