SB 923 is Law: CCPA deletion rights now reach third-party data

California SB 923 extends CCPA right-to-delete obligations to consumer data held by third parties, expanding compliance requirements for businesses.

California has enacted SB 923, which expands CCPA data deletion rights so they now reach consumer personal information held by third parties. The law broadens compliance obligations for businesses that collect, share, or retain California consumers' data downstream of the original data holder.

• SB 923 signed into law in California
• CCPA right-to-delete now extends to third-party data holders
• Businesses face expanded deletion compliance obligations