CaliforniaCaliforniaLawSB 362
Delete Act
Requires data brokers to register with the California Privacy Protection Agency and to process consumer deletion requests submitted through a single state-run deletion mechanism.
Data brokers required to begin processing deletion requests through the Delete Request and Opt-out Platform (DROP)Aug 1 3 months ago
- Body
- California Legislature
- Session
- 2023-2024
- Introduced
- Feb 8, 2023
- In effect since
- Jan 1, 20242 years ago
- Votes
- Senate 32-8, Assembly 52-14, Senate concurrence 31-9
- Sponsors
- D (Democrat)Democrat
Timeline
Aug 1 3 months ago
Oct 10, 2023 3 years ago
Sep 13, 2023 3 years ago
May 31, 2023 3 years ago
Feb 8, 2023 3 years ago
Sponsors
- D (Democrat)Senator Becker
Related
Mental Health Professionals: Artificial Intelligence
Would limit the use of AI in psychotherapy services to administrative or supplementary support and bar training models on psychotherapy data in ways inconsistent with confidentiality law.
Wearable technology privacy bill
This bill would have regulated wearable technology devices to address privacy concerns.
Consumer Privacy: Deletion Requests
Would expand the CCPA right to delete to all personal information a business has collected about a consumer and require businesses to offer an online method for submitting privacy requests.
Data Brokers: Deletion Mechanism: Elected Officials and Judges
Would shorten the Delete Act processing cycle for data brokers from 45 to 30 days and require notice to elected officials and judges that they can use the deletion mechanism.
Online Services Accessed by Children
Repeals the enjoined Age-Appropriate Design Code Act and replaces it with similar duties requiring online services likely to be accessed by children to take reasonable steps to prevent specified risks of harm.
California Age-Appropriate Design Code Act
Requires online services likely to be accessed by children to assess and mitigate risks to children and to configure default privacy settings to a high level of privacy.
CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments and Cybersecurity Audits
Regulations that give consumers rights to access and opt out of businesses' use of automated decisionmaking technology and require certain businesses to conduct risk assessments and annual cybersecurity audits.
Digital Age Assurance Act
Requires operating system providers to collect a user's age at account setup and send an age bracket signal to app stores and developers, beginning January 1, 2027.
Change log
- AddedAdded to the list. Set by hand from the official record.Sep 27
Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.