California Closes a CCPA Deletion Gap: SB 923 Reaches Third-Party Data

Ecommerce Innovation Alliance

September 30, 2026

California is expanding one of the California Consumer Privacy Act’s core consumer rights. Gov Newsom has signed SBl 923, the Expanding Privacy Rights Act, which broadens the CCPA’s right to delete so that it generally applies to personal information a business has collected from or about a consumer — regardless of where that information originated. The new requirements take effect January 1, 2027. For ecommerce businesses, that could mean taking a closer look at customer information obtained through data enrichment, advertising and marketing partners, third-party data providers, and other outside sources.…

READ FULL POST