# California expands consumer deletion rights to third-party data

_Published Monday, September 28, 2026 at 6:08 PM EDT · Policy, Products · Latest · Tier 2 — Notable_

![SB 923 Is Law: CCPA Deletion Rights Now Reach Third-Party Data — Primary](https://www.getprivisy.com/blog/sb-923-ccpa-right-to-delete-signed/opengraph-image?a722bbfad2c17eef)

California Governor Gavin Newsom signed SB 923 on September 27, extending consumer deletion requests under the state's privacy law to personal information businesses collect from or about a person, including data obtained from third parties. The changes take effect January 1, 2027.

Businesses handling third-party data may retain only the minimum information needed to keep deleted records from returning through later data updates. The law also requires businesses that operate exclusively online and have a direct consumer relationship to offer an online request method alongside email. Existing exemptions for uses such as fraud prevention and legal obligations still apply.

## Sources

- [getprivisy.com](https://www.getprivisy.com/blog/sb-923-ccpa-right-to-delete-signed)

---
Canonical: https://techandbusiness.org/newswire/UaII16Pyc-X-pYg_G1pj4K
Published: 2026-09-28T22:08:42.789Z
Story chronology: 2026-09-27T00:00:00.000Z
Retrieved: 2026-09-28T23:39:11.705Z
Publisher: Tech & Business (techandbusiness.org)