United States of America: Bill amending Civil Code to include provisions on data collection and deletion by data brokers enters into force

On 1 January 2026, the Bill amending the Civil Code to include provisions on data collection and deletion by data brokers enters into force. The California Privacy Protection Agency will launch an Accessible Deletion Mechanism for consumers to request deletion of their personal data held by registered data brokers and their service providers handling consumer information. The mechanism will let consumers file one verified request, exclude specific brokers, and track request status. From this date, data brokers must check the system every 45 days, delete or cease sharing data within 45 days, and direct partners to do the same. Unverified requests must be treated as opt-outs, and retained data can only be used for exempt legal purposes, not marketing.