Cybersecurity Policy Report, Legislation to Expand Privacy Rights Advances in California, (May 15, 2026)
The California state Senate Committee on Appropriations voted this week to pass a bill that would expand consumer rights regarding personal information deletion and improve the accessibility of opt-out request submission methods.
Bill sponsor Sen. Josh Becker (D.) said the legislation would expand on the Delete Act he sponsored to implement a mechanism to make it easier for consumers to ask registered data brokers to delete their personal information. California’s Delete Request and Opt-Out Platform (DROP) was launched earlier this year.
Sponsored by the California Privacy Protection Agency, the Expanding Privacy Rights Act (S.B. 923, Reg Sess.) “reinforces consumers’ rights under the California Consumer Privacy Act (CCPA) by expanding the right to delete personal information to cover information that a business collects and holds on a consumer from a third-party, and it requires businesses who operate exclusively online to provide consumers with both an email address and an online method, such as a webform or online portal, for Californians to access, correct, or delete their personal information,” Sen. Becker said.
In addition, for personal information obtained from sources other than the consumer, businesses would be allowed to retain only the minimum data necessary to ensure compliance with the deletion request and to prevent further use of the data, according to the bill.
News: StateLegislation DataPrivacy CCPA