1. (a) After the registration period closes, a data broker cannot be removed from the publicly posted registry, except in cases where a data broker was erroneously registered (e.g., fraudulent submission). In cases of an erroneous registration, the business must submit to the Agency a written request for removal from the registry that explains why the business should not be included on the registry and any supporting evidence.

2. (b) Notwithstanding subsection (a), a data broker may update the following at any time through its DROP account:

   1. (1) A change in the name, email, or phone number of the point of contact;
   2. (2) A change in the data broker's public-facing contact information, provided pursuant to Civil Code section 1798.99.82(b)(2)(A); or
   3. (3) A change in the data broker's public-facing website addresses, provided pursuant to Civil Code section 1798.99.82(b)(2)(A) and (b)(2)(G).

Note: Authority cited: Section 1798.99.87, Civil Code. Reference: Sections 1798.99.80, 1798.99.82 and 1798.99.86, Civil Code.

History

1. New section filed 12-26-2024; operative 12-26-2024 pursuant to Government Code section 11343.4(b)(3) (Register 2024, No. 52).

2. Amendment of subsection (b) and Note filed 11-6-2025; operative 1-1-2026 (Register 2025, No. 45).