United States of America: California Privacy Protection Agency opened consultation on regulation establishing Delete Request and Opt-Out Platform under Delete Act (SB 362)

On 25 April 2025, the California Privacy Protection Agency (CPPA) opened a consultation on proposed regulations setting system requirements for the Delete Request and Opt-Out Platform (DROP), pursuant to the Delete Act (SB 362). The consultation will run until 10 June 2025. The proposed regulations would require data brokers registered in California to create an account in the DROP, process consumers' deletion requests centrally through the platform, and report request outcomes. Consumers would be able to submit a single verifiable deletion request to all registered data brokers. The regulation also establishes security standards for accessing the DROP and clarifies conditions under which deletion requests are converted to opt-out requests if verification is not possible.