39 Million Californians Can Now Legally Demand Data Brokers Delete Their Personal Data (techcrunch.com)
- Reference: 0180515373
- News link: https://yro.slashdot.org/story/26/01/05/0224249/39-million-californians-can-now-legally-demand-data-brokers-delete-their-personal-data
- Source link: https://techcrunch.com/2026/01/03/california-residents-can-use-new-tool-to-demand-brokers-delete-their-personal-data/
> Once DROP users verify that they are California residents, they can submit a deletion request that will go to all current and future data brokers registered with the state...
>
> Brokers are supposed to start processing requests in August 2026, then they have 90 days to actually process requests and report back. If they don't delete your data, you'll have the option to submit additional information that may help them locate your records. Companies will also be able to keep first-party data that they've collected from users. It's only brokers who seek to buy or sell that data — which can include your social security number, browsing history, email address, phone number, and more — who will be required to delete it...
>
> The California Privacy Protection Agency says that in addition to giving residents more control over their data, the tool could result in fewer "unwanted texts, calls, or emails" and also decrease the "risk of identity theft, fraud, AI impersonations, or that your data is leaked or hacked."
[1] https://techcrunch.com/2020/01/02/california-privacy-opt-out-data/
[2] https://techcrunch.com/2026/01/03/california-residents-can-use-new-tool-to-demand-brokers-delete-their-personal-data/
[3] https://privacy.ca.gov/drop/
They will move off shore (Score:2)
Then what?
Does this include California government databases?
Re: (Score:2)
And the [1]FEC database [fec.gov]?
[1] https://www.fec.gov/introduction-campaign-finance/how-to-research-public-records/individual-contributions/
I Love You (Score:2)
XOXO xoxo to all Californians!
--
I've lived in California for six years and I've never surfed. - Bill Skarsgard
Sure buddy (Score:2)
Im sure it will be just as good as the "do not call" list which means only scammers will call you 10-15 times per day. Also the drop down calander that you have to scroll through to enter your birthday is next to fukin stupid.
A great first step (Score:4, Informative)
The real problem is not the data brokers but the data buyers. You know the top 100 largest companies have already bought the data from all the brokers. And they collect more data on you that they do not sell.
They do not sell, which means they are not registered data brokers. And in the United States there are NO laws that apply to their data. That means:
1) You cannot get them to delete anything.
2) They will not tell you what data they have on you.
3) They will not even tell you if they have any data on you.
California's law is a good one, but it is just the start of what we really need to do.
State legislators are easy to buy (Score:2)
State legislators are easy to buy and not that expensive, like federal politicians. I'll bet the data brokers don't have an association in California. If they form that, and shell out some cash to legislators, this law will be rolled back.
Sure they'll delete it. (Score:3)
A quarter century ago I briefly dated a stripper. She needed new posters to sell, but she couldn't afford a professional photographer and she wanted control of the masters. This was near the dawn of digital photography for consumers and I had a camera, so I agreed to take them. We did a shoot with a couple hundred photos. They weren't great, but it got the job done.
Shortly after that we stopped seeing each other. She asked me for the photos, and requested I delete them. I said yes. I burned the shots to two copies on CDs and gave them to her.
I did not delete them.
I never shared them with another soul, but I absolutely lied to her. I knew I was lying as I said it. And my reasons were up front and simple. Fast forward to me today, and the only difference is that today I'd be honest about not deleting them. I would promise to keep them private.
Now these brokers have a vastly stronger motive to lie. Money. Lots and lots of it. I guarantee you data that is "deleted" is just relocated. Even if there's no immediate plan for it, it will be hoarded. And there are so many ways to do it you cannot catch them.
Re: (Score:2)
I wonder if once they've sold the data to whoever (evil) entities that want it, there's no more market for that particular data, so they don't mind "deleting" it.
Re: (Score:2)
You sound like a great guy.
flock cameras (Score:2)
So will they be able to demand that flock and other types of cameras delete and do not record everyone's personal information?
[1]https://youtu.be/uB0gr7Fh6lY?s... [youtu.be]
and if you do not think they have your personal information, here, watch this: [2]https://youtu.be/vU1-uiUlHTo?s... [youtu.be]
with AI they DO have your personal data. They can see you and follow you in real time, they know where you live, they know what you drive, they know who you are, they know everything about you because you cannot escape 80,000 + cameras ever
[1] https://youtu.be/uB0gr7Fh6lY?si=pj7kVnZTD-RJ0f8z
[2] https://youtu.be/vU1-uiUlHTo?si=E_PwvXMqGLp4jQ90
Re: (Score:2)
> So will they be able to demand that flock and other types of cameras delete and do not record everyone's personal information?
In theory, yes. How that will work in practice is still untested. I recommend those in CA ask flock to delete all their information (and see how they respond). If they do not respond in a way you agree with, send the documentation of non-compliance to the CA AG (who seems to be willing to take these companies to court).
These are incompatible requirements (Score:2)
The idea of deleting a consumer's data is at odds with the requirements for CCPA opt-out. Anyone who submits an opt-out request needs to be on record that they don't want their data to be used for certain purposes. If a data broker is required to delete the consumer's data, how are they supposed to honor opt-out going forward as they get updated data that might include the identities again?
Re: (Score:2)
I haven't read this bill. But if it's remotely like the right of erasure pursuant to the European Union's GDPR, it does not apply to data that a data broker is required by law to retain.
Remember the Federal Do Not Call list? (Score:2)
[1]https://www.donotcall.gov/ [donotcall.gov]
How did that work out?
Let's see if California can do anybetter.
[1] https://www.donotcall.gov/
likely to fail (Score:4, Interesting)
We can hope it will work. We will see just how far the long arm of California law reaches. The Do Not Call list really became a verified list to abuse.