# Delete Act

URL: https://sellmydatatoai.net/glossary/delete-act

The Delete Act is California's 2023 data broker law, which requires annual registration with the CPPA and lets consumers delete their data from every broker at once.

The Delete Act is the California law, SB 362 of 2023, that regulates data brokers through [Civil Code sections 1798.99.80 to 1798.99.89](https://www.cppa.ca.gov/regulations/pdf/data_broker_reg_delete_act_statute_eff_20260101.pdf). It defines a data broker as a business that knowingly collects and sells personal information of consumers it has no direct relationship with, and it gave the registry to the California Privacy Protection Agency.

## What does the Delete Act require?

- Registration with the [CPPA](https://cppa.ca.gov/data_brokers/) from January 1 to 31 each year, with a 2026 fee of $6,000
- Access to the Delete Request and Opt-out Platform (DROP) at least every 45 days from August 1, 2026, and deletion of matching records
- An independent audit every three years from January 1, 2028
- Disclosure of whether the broker sold or shared data with a generative AI developer in the past year

Fines are $200 a day for failing to register and $200 per deletion request for each day a broker fails to delete.

## Does the Delete Act apply to a company selling its own data?

The Delete Act usually does not apply to a company licensing data about its own customers or staff, because those people have a direct relationship with it. Our guide to [whether you need to register as a data broker](https://sellmydatatoai.net/guides/do-you-need-to-register-as-a-data-broker) explains the exceptions, and the [data broker](https://sellmydatatoai.net/glossary/data-broker) entry covers the wider term.