California Expands Delete Act Disclosures with SB-361

California Expands Delete Act Disclosures with SB-361

California’s expanded Delete Act now mandates extensive disclosure from data brokers, requiring them to report specific data types and third-party sharing activities. This includes revealing if personal information is sold to foreign adversaries, government entities, or AI developers. The regulation aims to enhance transparency and consumer privacy protection by exposing previously hidden data flows and potential national security risks. This shift is critical for open data advocates because it illuminates the opaque nature of the data brokerage industry. By forcing brokers to register and disclose their practices, policymakers and researchers gain access to crucial insights about how consumer data is aggregated, sold, and utilized. Such transparency supports the open data movement by challenging the secrecy that often surrounds commercial data ecosystems and enabling better public oversight. As the enforcement landscape tightens, companies face heightened compliance obligations ahead of the 2026 deadline. The California Privacy Protection Agency’s active investigation underscores a broader trend toward stricter regulatory scrutiny. Consequently, organizations must proactively assess their obligations to avoid penalties, ensuring that data handling practices align with evolving privacy standards and legal requirements.

Source: natlawreview.com
Published on 2025-10-18