United States of America: Implementation of the accessible deletion mechanism obligation under Civil Code Section 1798.99.86(a), as enacted by Senate Bill 362 (DELETE ACT)

By 1 January 2026, the accessible deletion mechanism obligation in Civil Code Section 1798.99.86(a), as enacted by Senate Bill 362 (DELETE ACT), is required to be implemented by the California Privacy Protection Agency. The obligation requires the agency to establish an accessible deletion mechanism that enables a consumer, through a single verifiable consumer request submitted using an internet service operated by the agency, to request that every data broker that maintains any personal information delete that information. The mechanism must support selective exclusion of individual data brokers, allow a consumer to alter a previous request after at least 45 days, permit privacy-protecting submission methods, allow requests in any language spoken by any consumer whose personal information is collected by data brokers, be accessible to consumers with disabilities, support authorised agents, provide status-verification functionality, prohibit charging a consumer, and provide a description of the permitted deletion actions, the process for submitting a deletion request, and examples of the types of information that may be deleted.