The California Privacy Protection Agency (“CalPrivacy”) has issued an Invitation for Preliminary Comments on a key upcoming requirement under the Delete Act: independent audits of data brokers’ deletion practices. CalPrivacy is accepting comments through May 7, 2026.
While the audit requirements do not come into force until 2028, CalPrivacy is shaping the audit rules now, and data brokers, consumers, and other stakeholders have the opportunity to weigh in on this process.
Read the full blog post.
