United States of America: Opened consultation on CPPA notice of proposed rulemaking to establish an accessible deletion mechanism under DELETE Act (SB 362)

On 31 May 2024, the California Privacy Protection Agency (CPPA) opened a public consultation on its notice of proposed rulemaking to establish an accessible deletion mechanism under the DELETE Act (SB 362). The consultation closes on 25 June 2024. The Act mandates the CPPA to create an accessible deletion mechanism, enabling Californians to request the deletion of their personal information from data brokers via a single request. The CPPA plans to develop the Data Broker Delete Requests and Opt-Out Platform (DROP), operational from 1 January 2026, with data brokers required to process these requests every 45 days starting 1 August 2026. Therefore, the CPPA seeks information from stakeholders on verifiable consumer requests, privacy-protecting submissions, the status of requests, and consumer experience.