California Privacy Agency Seeks Feedback on Data Broker Audits

California’s privacy agency wants suggestions in drafting new rules for data brokers to audit their compliance with the state’s data deletion requirements.

The agency, known as CalPrivacy, is asking for feedback on the type of records data brokers should be required to maintain and disclose to show they’ve been honoring requests from California residents to delete their personal information. Under California’s Delete Act , data brokers must get audited on their compliance by an independent third party every three years starting in January 2028.

• CalPrivacy is seeking comments on credentials that third-party auditors should possess to ensure they’re independent, documentation ...