Third-party data is part of the change
California consumers will gain a broader deletion right on January 1, 2027 under newly signed SB 923, according to Senator Josh Becker's September 28 announcement. The change addresses personal information businesses obtain from third parties, including data brokers, rather than only information supplied directly by the consumer.
The distinction matters because businesses can build profiles using purchased demographic, shopping, location and other data. The announcement says the right will reach information collected from or about the person regardless of its origin. It should not be reported as a rule already effective on October 3.
Privacy requests still have legal conditions
The law also requires certain online-only businesses that currently provide only an email address for privacy requests to offer an accessible online method, such as a webform or portal. A simpler submission channel is different from a promise that every deletion request removes every record under every legal exception.
Consumers can review existing privacy notices now and keep confirmation records when making requests. Recheck the business's procedures and applicable CCPA conditions when the expanded law takes effect. Deletion rights and a broker opt-out system are related privacy tools, but their scope, timing and implementation should not be collapsed into one guaranteed erasure button.