KLS Keeping Law Simple Legislation in plain English

Straight-ahead summaries built from the official bill text. We keep the source links front and center and leave the decision up to you.

Back to California

SB-1106 • 2026

Data brokers.

Data brokers.

Privacy
Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor
Cabaldon
Last action
2026-04-21
Official status
Read second time. Ordered to third reading.
Effective date
Not listed

Plain English Breakdown

The official source material does not provide details on what happens if a data broker fails to comply with the new 30-day requirement.

Data Brokers: Shorter Deletion Periods

The bill changes how often data brokers must check and delete personal information requested by consumers from once every 45 days to once every 30 days.

What This Bill Does

  • Changes the time frame for data brokers to process deletion requests from 45 days to 30 days.

Who It Names or Affects

  • Data brokers who keep and use personal information from consumers.
  • Consumers who want their personal information removed from data broker databases.

Terms To Know

Data Broker
A company that collects, sells, or licenses personal information about individuals for marketing purposes.
Deletion Mechanism
A system set up by the California Privacy Protection Agency to help people request removal of their personal data from data brokers.

Limits and Unknowns

  • The bill does not specify what happens if a data broker fails to comply with the new 30-day requirement.
  • It is unclear how this change will affect the workload or operations of data brokers.

Bill History

  1. 2026-04-21 California Legislative Information

    Read second time. Ordered to third reading.

  2. 2026-04-20 California Legislative Information

    From committee: Do pass. (Ayes 5. Noes 0.) (April 20).

  3. 2026-04-10 California Legislative Information

    Set for hearing April 20.

  4. 2026-04-07 California Legislative Information

    From committee: Do pass and re-refer to Com. on APPR. (Ayes 8. Noes 0.) (April 6). Re-referred to Com. on APPR.

  5. 2026-03-26 California Legislative Information

    Set for hearing April 6.

  6. 2026-02-26 California Legislative Information

    Referred to Com. on P., D.T., & C.P.

  7. 2026-02-17 California Legislative Information

    From printer. May be acted upon on or after March 16.

  8. 2026-02-13 California Legislative Information

    Introduced. Read first time. To Com. on RLS. for assignment. To print.

Official Summary Text

SB 1106, as introduced, Cabaldon.
Data brokers.
Existing law requires the California Privacy Protection Agency to establish an accessible deletion mechanism that, among other things, allows a consumer, through a single verifiable consumer request, to request that every data broker that maintains any personal information delete any personal information related to that consumer held by the data broker or an associated service provider or contractor. Existing law requires, beginning August 1, 2026, a data broker to access that deletion mechanism at least once every 45 days and, among other things, process all deletion requests and delete all personal information related to the consumers making the requests, as specified.
This bill would change the above-described 45-day periods to 30-day periods.

Current Bill Text

Read the full stored bill text 
Download Bill PDF