Data brokers: accessible deletion mechanism: deletion of personal information of elected officials and judges

The law shortens the time data brokers have to check for and process deletion requests. It also creates notice and enforcement tools for public officials and judges using California’s one-stop deletion system.

What the law does ​

• Requires data brokers to check the California Privacy Protection Agency’s deletion mechanism and process deletion requests at least every 30 days, rather than every 45 days.
• Requires data brokers to direct their service providers and contractors to delete requested information or honor applicable sale-and-sharing opt-outs.
• Requires the Secretary of State, local filing officers, the Judicial Council, and the State Bar of California to notify covered elected officials and judges that they can use the deletion mechanism.
• Requires the California Privacy Protection Agency to provide those entities with information on using the mechanism.
• Allows the Attorney General, county counsel, or city attorney to sue data brokers on behalf of covered officials or judges for violations, seeking damages, injunctions, declarations, attorney’s fees, and potentially punitive damages for willful violations.

Who it affects ​

• Data brokers and their service providers and contractors.
• California consumers submitting deletion requests.
• State and local elected officials, superior court judges, appellate justices, Supreme Court justices, and State Bar Court judges.
• The California Privacy Protection Agency, Secretary of State, Judicial Council, State Bar of California, and local filing officers.