Businesses will soon have to honor requests by California residents to delete personal data no matter who collected the information originally.
The change, which will take effect Jan. 1, 2027, falls under a bill (SB 923) signed Sunday by Gov. Gavin Newsom, which expands the publicโs data privacy rights under the stateโs landmark California Consumer Privacy Act (CCPA). The agency was created under the act, and it writes and enforces the state’s privacy rules.



