CPPA Proposes New Regulations for Data Broker Registration under the Delete Act

In a move to clarify and streamline the data broker registration process, the California Privacy Protection Agency (“CPPA”) recently issued a Notice of Proposed Rulemaking (“NPRM”) for new regulations aimed at enforcing the Delete Act (SB 362). These proposed regulations are designed to address challenges faced by businesses that qualify as data brokers, offering greater clarity on registration requirements and supporting the agency's goal of consumer protection and transparency. The Delete Act, signed into law in 2023, transferred the administration of the Data Broker Registry from the California Attorney General’s Office to the CPPA starting January 1, 2024. This law requires businesses that meet the definition of a "data broker" to register with the CPPA, pay an annual fee, and submit relevant registration information. While the initial registration process revealed several ambiguities, the new regulations aim to resolve these issues and ensure that businesses comply with the statute.