CPPA Releases Notice of Proposed Regulatory Action for Data Broker Registration

Agency opens formal public comment period on proposed Data Broker Registration regulations.

The California Privacy Protection Agency (Agency) today began the formal rulemaking process to adopt proposed regulations for data broker registration authorized by Senate Bill (SB) 362 (2003), also known as the Delete Act. This latest development follows the CPPA Board’s vote on May 10, 2024, to begin the Agency’s formal rulemaking process.

The proposed regulations address common questions and obstacles that surfaced for data brokers in the initial registration period. To that end, the proposed regulations: (1) detail what is included in, and how to pay the registration fee; (2) define terms included in SB 362; and (3) clarify requirements for registration, updates to the registry, and website disclosures.

The notice of proposed rulemaking can be found here: cppa.ca.gov/regulations/pdf/data_broker_reg_nopa.pdf

The proposed regulations and supporting documents can be accessed on the Agency’s website here: https://cppa.ca.gov/regulations/

All written comments must be received by August 20, 2024, at 5 p.m. Pacific Time to be considered. The Agency will also hold a virtual public hearing to receive comments on August 20, 2024. Details regarding the submission of public comments and how to participate in the hearing can be found in the Notice on the Agency’s website.

Please note that all information provided in oral and written comments is subject to public disclosure.

To receive updates on the Agency’s rulemaking activity, please sign up for our email list.

Contact: press@cppa.ca.gov