Illustrative artworkSB 923 expands CCPA deletion controls for nonexempt personal information
SB 923 closes the CCPA deletion gap for personal information obtained from third parties and requires an online request method for qualifying online-only businesses. The final law permits narrowly retained suppression data and keeps existing deletion exceptions and downstream coordination requirements.
Medium priority · Oct 4, 2026 editionRead story →



