Consumers can make businesses delete personal data collected about them from others
California's privacy law now lets people ask a business to delete personal information it collected about them from any source, not only from them. Online-only businesses must also offer a web form or portal for privacy requests, besides an email address.
Who it affects
Businesses covered by the state consumer privacy law and consumers
When
This law takes effect on January 1, 2027. California laws take effect on January 1 of the year after they are signed, unless the law says otherwise.
- : Signed into law
- : This law takes effect
Official text
California SB 923: Consumer privacy requests: deletion request records and request submission methods.
On California Legislative Information. The official text is what counts; read it before you act.
Not legal advice. Plain-English summaries to help you find what changes and when. Not legal advice: read the official text, and ask a lawyer about your situation.