Data Broker Registration Regulations
In 2023, the Legislature passed the Delete Act. (Senate Bill (SB) 362, Chapter 709, Statutes of 2023.) Businesses meeting the definition of data broker are required to register, provide specific information when registering, and pay a registration fee. (Cal. Civ. Code, § 1798.99.82.) As of January 1, 2024, the Agency maintains and implements the Data Broker Registry. These regulations contain the specific requirements for data broker registration.
Effective Date of Regulations: December 26, 2024
Status of the Proposal: The rulemaking is complete. On December 26, 2024, the regulations were approved by the Office of Administrative Law and filed with the Secretary of State.
Final rulemaking documents
Rulemaking activities
July 5, 2024 - Public Notice of Rulemaking and Related Documents
On July 5, 2024, the California Privacy Protection Agency commenced the formal rulemaking process to adopt regulations for data broker registration required by to Senate Bill 362 (2023), also known as the Delete Act. These proposed regulations address common questions and obstacles that surfaced for data brokers in the most recent registration period. To that end, the proposed regulations: (1) detail what is included in, and how to pay the registration fee; (2) define terms included in SB 362; and (3) clarify requirements for registration, updates to the registry, and website disclosures.