United States of America: Senate Bill 362 on data brokers (DELETE Act) entered into force with grace period
Description
Senate Bill 362 on data brokers (DELETE Act) entered into force with grace period
On 1 January 2024, Senate Bill No. 362, the DELETE Act, entered into force following its signature on 10 October 2023, establishing requirements for data brokers to register with the California Privacy Protection Agency and disclose the types of personal information they collect. Certain provisions of the law are subject to various grace periods. The requirement for the California Privacy Protection Agency to establish a deletion mechanism for data broker compliance enters into force on 1 January 2026. Data brokers are required to regularly access the mechanism from 1 August 2026. Finally, from 1 January 2028 and every three years thereafter, each data broker must undergo an independent audit and submit the audit report to the agency upon written request, and non-compliance with registration or deletion-mechanism obligations is subject to administrative fines, fees and costs.
Original source