California Senate Bill SB1106

California 2025-2026 Regular Session

• Introduced: 2/13/26
• Refer: 2/26/26
• Report Pass: 4/7/26
• Refer: 4/7/26
• Report Pass: 4/20/26

Caption

Data brokers.

Impact

If enacted, this legislation will have significant implications for how data brokers manage consumer information. The bill mandates that data brokers must access the deletion mechanism at least once every 30 days to process deletion requests. This change is expected to enhance consumer trust and give individuals more control over their personal data. Furthermore, the California Privacy Protection Agency will be tasked with conducting audits of data brokers starting January 1, 2028, ensuring compliance with the new regulations and potentially imposing fees for accessing the deletion mechanism.

Summary

Senate Bill No. 1106, introduced by Senator Cabaldon, aims to amend Section 1798.99.86 of the Civil Code related to data brokers and consumer privacy. The bill is focused on enhancing consumer rights by establishing a more efficient deletion mechanism for personal information maintained by data brokers. Under current law, a consumer can request the deletion of their personal information, but data brokers are only required to process these requests every 45 days. SB1106 proposes to reduce this timeframe to 30 days, thereby expediting the removal of personal data and improving consumer privacy protections.

Contention

While the bill is generally seen as a positive step towards enhancing consumer privacy, it may encounter opposition from data brokers who could argue that the reduced timeframe for data deletion may pose operational challenges. Additionally, there may be discussions around the financial implications of the audit requirement and the costs associated with managing compliance with the new regulations. The balance between consumer rights and the operational realities of data management by brokers will likely be a point of contention as the bill moves forward.