Data brokers would have to check for deletion requests more often, while officials and judges would receive notice of their right to ask for deletion.
Data brokers would have to check the deletion system every 30 days, instead of every 45 days, and handle requests within 30 days. They must also tell their service providers or contractors to delete covered information.
Government offices and the State Bar would tell elected officials and judges that they can ask data brokers to delete their personal information through California’s deletion system.
Government lawyers could sue data brokers over violations involving an elected official’s or judge’s information. Courts could order remedies, and could award extra damages for willful violations.
Data brokers must check the deletion system every 30 days and act on requests within 30 days. This applies to data brokers using California’s accessible deletion system and to consumer requests submitted through it. A broker may keep information when privacy law allows or requires it, but may use or share it only for that allowed purpose. The 30-day checking and request-processing rules begin August 1, 2026.
State and local offices, the Judicial Council, and the State Bar must tell covered officials and judges they can request deletion of their personal information. Notices cover state and local elected officials, California judges, and State Bar Court judges. Officials who are newly elected and judges who are newly appointed or elected must also be notified. The California Privacy Protection Agency must prepare information on how to use the deletion system and send it to the relevant offices; offices may meet their notice duty by sharing that material. These notice and information duties begin July 1, 2027. Notices for newly elected or appointed people follow their election certification or appointment, as applicable.
The Attorney General, a county counsel, or a city attorney may sue a data broker for an elected official or judge whose deletion rights were violated. The case must concern a data broker’s violation of deletion rules involving the personal information of an elected official or judge. A court may order relief such as stopping a violation or awarding actual damages and reasonable attorney’s fees. For a willful violation involving an official or judge notified under this law, the court may also award punitive damages. Deletion remains subject to existing privacy-law limits. This enforcement option begins July 1, 2027.
No hearings or votes scheduled.