GoKawiilCalifornia enacts SB 923, extending CCPA deletion rights to third-party data
Governor Newsom signed SB 923 on September 27, 2026, amending the CCPA so consumer deletion requests cover personal information a business acquired from brokers or other third parties, not just data collected directly. The law also requires online-only businesses to offer a web form or portal for privacy requests, not just an email address, by January 1, 2027. The same day, Newsom vetoed a separate bill, AB 1542, that would have banned outright sales of sensitive personal information.