- (a) A business, regardless of its status as a parent company or subsidiary of another business, which independently meets the definition of “data broker” as set forth in Civil Code section 1798.99.80 for any period of time during the previous calendar year must register during the registration period through the Agency's website and create a DROP account in accordance with section 7610.
- (b) Registration must be completed by an employee or agent of the data broker who is authorized to register the data broker and has sufficient knowledge of the data broker's practices to provide accurate information and otherwise comply with the requirements in section 7603. The employee or agent who registers the data broker must certify under penalty of perjury that to the best of their knowledge the information they submit is true and correct.
- (c) A data broker cannot amend or withdraw a completed registration after January 31, except as set forth in section 7604.
Note: Authority cited: Section 1798.99.87, Civil Code. Reference: Sections 1798.99.80, 1798.99.82 and 1798.99.86, Civil Code.
History
1. New section filed 12-26-2024; operative 12-26-2024 pursuant to Government Code section 11343.4(b)(3) (Register 2024, No. 52).
2. Amendment of subsection (a) and Note filed 11-6-2025; operative 1-1-2026 (Register 2025, No. 45).