Security News > 2023 > September > California passes bill to set up one-stop data deletion shop

Infosec in brief Californians may be on their way to the nation's first "Do not broker" list with the passage of a bill that would create a one-stop service for residents of the Golden State who want to opt out of being tracked by data brokers.

If signed, the bill will require the California Privacy Protection Agency to set up a website by 2026 where residents could go to, listing every single data broker registered in the state of California, to delete whatever data they had on the individual - and to keep deleting anything new they acquired every 45 days.

The bill would also prohibit the selling or sharing of any newly collected personal data of an individual who requested deletion.

The bill will also require data brokers to undergo triennial audits to ensure they've been complying with the bill's provisions, and would impose civil penalties on violators.

There are around 500 data brokers registered in the state of California, and consumers have to contact every single one individually to request their data be wiped.

"Data brokers currently have the ability to use data on reproductive healthcare, geolocation, and purchasing data to sell it to the highest bidder," California state Senator Josh Becker, who introduced the bill, said of SB 362.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/09/18/california_passes_bill_to_set/