Businesses will soon have to honor requests by California residents to delete personal data no matter who collected the information originally.

The change, which will take effect Jan. 1, 2027, falls under a bill (SB 923) signed Sunday by Gov. Gavin Newsom, which expands the publicโ€™s data privacy rights under the stateโ€™s landmark California Consumer Privacy Act (CCPA). The agency was created under the act, and it writes and enforces the state’s privacy rules.

Adrianne Appel writes regulatory news, policy, and trends for Compliance Week. She previously reported about policy developments for Bloomberg Law and Bloomberg Government. Email: adrianne.appel@complianceweek.com LinkedIn:...