CalPrivacy Sponsors Bill That Expands Deletion Rights and Accessibility Requirements

January 30, 2026

SACRAMENTO, CA — Senator Josh Becker has introduced SB 923, the Expanding Privacy Rights Act, sponsored by the California Privacy Protection Agency (CalPrivacy). The bill would strengthen consumers’ rights under the California Consumer Privacy Act (CCPA) by expanding the right to delete personal information and by improving how consumers can exercise that right.  

Under the proposed legislation, California consumers would gain the right to request deletion of all personal information a business holds about them, not just information collected directly from the consumer. This expansion of the existing deletion right would close a critical gap in privacy protections by addressing the widespread practice of businesses supplementing consumer records with data purchased from data brokers and other third parties. If passed, consumers would be able to request deletion of personal information obtained from third-party sources, in addition to the information they provide themselves. 

“Californians have been very clear that they want to reclaim control over their personal information, and this bill gives them a new tool to do that,” said Becker. “The incredible success of the Delete Act and DROP demonstrates that strong privacy laws are practical, popular, and effective. SB 923 makes it easier for Californians to delete their personal information that businesses collect and hold on them. If a business is using your data to make decisions that impact you, then you should have the right to delete it.” 

“The current deletion right under the CCPA does not address the full scope of information businesses often hold about an individual,” said Tom Kemp, Executive Director of CalPrivacy. “This legislation recognizes that consumers should have control over all of their personal information, regardless of how a business obtained it. It also aligns California with the majority of state privacy laws that provide a comprehensive deletion right.” 

The bill also requires online businesses to provide consumers with multiple methods to submit privacy requests, such as requests to access, delete, or correct their data. Rather than providing only an email address, online businesses would be required to provide an additional option, such as a webform, that offers structure and guidance. This would make privacy rights more accessible to consumers regardless of technical ability or legal expertise. Streamlined forms or portals would also increase efficiency for businesses by ensuring all necessary information is provided upfront.  

“Privacy rights must be meaningful and accessible to be effective,” said Maureen Mahoney, CalPrivacy’s Deputy Director of Policy & Legislation. “We thank Senator Becker for authoring legislation that builds on California’s strong privacy framework and further empowers individuals’ ability to exercise their rights.” 

About Us

The California Privacy Protection Agency (CalPrivacy) is committed to promoting the education and awareness of consumers’ privacy rights and businesses’ responsibilities under the California Consumer Privacy Act, Delete Act, and Opt Me Out Act.

Consumers can visit Privacy.ca.gov to access helpful and up-to-date information and tips on how to exercise their rights, protect their personal information, and learn about the Delete Request and Opt-out Platform (DROP). In addition, CalPrivacy’s website provides important information about Board Meetings, announcements, and the rulemaking process.