Cybersecurity Policy Report, Privacy Rights in California Would Expand Under Senate Bill, (Mar 17, 2026)
The California state Senate Committee on Privacy, Digital Technologies, and Consumer Protection meets April 6 to consider a bill that proposes to expand consumer rights regarding personal information deletion and improving the accessibility of request submission methods.
Bill sponsor Sen. Josh Becker (D.) said the legislation would expand on a law called the Delete Act he sponsored to implement a mechanism that makes it easier for consumers to request registered data brokers delete their personal information. California’s Delete Request and Opt-Out Platform (DROP) was launched earlier this year.
“SB 923 builds on the Delete Act by empowering consumers to delete their personal information from businesses who quietly add third-party data purchased by data brokers to detailed consumer profiles to target them for commercial purposes,” he said.
Sponsored by the California Privacy Protection Agency, the Expanding Privacy Rights Act (S.B. 923, Reg Sess.) “reinforces consumers’ rights under the California Consumer Privacy Act (CCPA) by expanding the right to delete personal information to cover information that a business collects and holds on a consumer from a third-party, and it requires businesses who operate exclusively online to provide consumers with both an email address and an online method, such as a webform or online portal, for Californians to access, correct, or delete their personal information.”
In addition, for personal information obtained from sources other than the consumer, businesses would be allowed to retain only the minimum data necessary to ensure compliance with the deletion request and to prevent further use of the data, according to the bill.
“Californians have been very clear that they want to reclaim control over their personal information, and this bill gives them a new tool to do that,” Sen. Becker said in a statement. “The incredible success of the Delete Act and DROP demonstrates that strong privacy laws are practical, popular, and effective. They show that if we make it easier, people will take advantage and delete their data. SB 923 makes it easier for Californians to delete their personal information that businesses collect and hold on them. If a business is using your data to make decisions that impact you, then you should have the right to delete it.”
News: StateLegislation DataPrivacy