California CPPA Publishes Data Broker Registry

On March 1, 2024, the California Privacy Protection Agency (CPPA) launched the data broker registry. This registry is a component of the California Delete Act, which was enacted at the start of 2024.

The registry acts as a centralized platform that allows California residents to request the deletion of their personal information from all registered data brokers within the state with more ease, supporting the one-stop-shop mechanism that the Delete Act creates. 

At the time of this article, the registry has 405 entries with business names, email addresses and websites of businesses that fit the data broker description, with the list being periodically updated throughout the year. Consumers can either search by the name of the data broker, or scroll through the list and submit their opt-out request. 

Starting 2026, this request can be submitted directly to the CPPA to have one’s non-exempt personal information deleted from the database of all data brokers, rather than having to submit an individual request with each data broker.

California Delete Act Summary

The California Delete Act, also known as Senate Bill No. 362, signed into law by Governor Gavin Newsom and taking effect on January 1, 2024, enhances consumer privacy protections in California. It creates a simpler way for people to ask data brokers—companies that collect and sell personal information—to delete their data with just one request.

This act is an extension of previous privacy laws and shifts some responsibilities to the California Privacy Protection Agency (CPPA), which now oversees these rules.

Under this new law, the CPPA will set up a system by January 1, 2026, that allows individuals to easily request the deletion of their information from all data brokers at once.

Data brokers must register with the CPPA every year, provide specific details about their practices, and follow strict rules about handling people's deletion requests. They must also check the deletion system regularly and remove data as needed. If they don't follow the law, they can face fines.

The act aims to make it easier for Californians to control their personal information and ensure that data brokers are transparent and accountable for protecting consumer privacy.