[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"blog-slug_blog_3_1":3,"blog-slug_blog_delete_act_1000_1":40},{"article":4,"articles":15,"meta":33,"languages":39},{"id":5,"title":6,"excerpt":7,"locale":8,"slug":9,"authorSlug":10,"automaticTranslated":11,"publishedAt":12,"updatedAt":13,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3060,"The EU wants to kill cookie banners","The EU wants to end annoying cookie pop-ups by letting users set their consent once in their browser. If passed, websites will have to respect those choices.","en","the-eu-wants-to-kill-cookie-banners-by-moving-consent-to-your-browser","iron-brands",false,"2025-11-20T05:40:14.356Z","2025-11-20T06:13:15.812Z","blog",[4,16,26],{"id":17,"title":18,"excerpt":19,"locale":8,"slug":20,"authorSlug":10,"automaticTranslated":11,"publishedAt":21,"updatedAt":22,"ctaTitle":23,"ctaDescription":24,"doFollowLinks":11,"showIndex":25,"showCallToActions":11,"articleType":14},3019,"Google is tracking you (even when you use DuckDuckGo)","Google tracks users even on DuckDuckGo via Analytics and embeds. A new study shows how deep Google’s web tracking really goes.","google-is-tracking-you-even-when-you-use-duck-duck-go","2025-07-14T08:56:41.709Z","2025-07-14T11:26:01.386Z","If you care about privacy, you don't use Google Analytics","Ditch the tracking, keep the insights. Try Simple Analytics.",true,{"id":27,"title":28,"excerpt":29,"locale":8,"slug":30,"authorSlug":10,"automaticTranslated":11,"publishedAt":31,"updatedAt":32,"doFollowLinks":11,"showIndex":11,"showCallToActions":11,"articleType":14},3018," German court rules Meta’s tracking tech violates GDPR","German court rules Meta’s tracking tech violates GDPR, allowing lawsuits without proof of harm. Big risks ahead for sites using Meta pixels.","german-court-rules-meta-s-tracking-tech-violates-gdpr","2025-07-10T08:20:51.111Z","2025-07-10T12:16:26.327Z",{"pagination":34},{"page":35,"pageSize":36,"pageCount":37,"total":38},1,3,362,1084,{},{"article":41},{"contentHtml":42,"content":43,"inlineMedia":44,"id":46,"title":47,"excerpt":48,"locale":8,"slug":49,"authorSlug":50,"automaticTranslated":11,"publishedAt":51,"updatedAt":52,"doFollowLinks":11,"showIndex":25,"showCallToActions":25,"articleType":14,"languages":53},"\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">On October 10, the State of California adopted the Delete Act, a new law that allows California residents to simultaneously require all data brokers to delete their personal information. The Act will likely deeply impact privacy practices inside and outside the State. So, let’s see what this law is all about!\u003C/ContentEditable>\n\u003Col class=\"counters\">\u003Cli>\u003CNuxtLink to=\"#what-is-the-delete-act\">What is the Delete Act?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#didnt-californians-already-have-a-right-to-erasure\">Didn’t Californians already have a right to erasure?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#how-does-the-delete-act-work\">How does the Delete Act work?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#how-is-the-delete-act-different-from-other-laws\">How is the Delete Act different from other laws?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#who-does-the-act-apply-to\">Who does the Act apply to?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#are-there-any-exemptions-to-the-delete-act\">Are there any exemptions to the Delete Act?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#what-are-the-penalties-under-the-delete-act\">What are the penalties under the Delete Act?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#what-impact-will-the-delete-act-have\">What impact will the Delete Act have?\u003C/NuxtLink>\u003C/li>\u003Cli>\u003CNuxtLink to=\"#conclusion\">Conclusion\u003C/NuxtLink>\u003C/li>\u003C/ol>\u003CCtaOne />\u003CContentEditable  id=\"what-is-the-delete-act\" parent=\"\" tag=\"h2\" :articleId=\"1862\">What is the Delete Act?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The Delete Act is a new California law on the right to \u003Cstrong>have your data deleted from data brokers\u003C/strong>. The Delete Act will be enforced by the California Privacy Protection Agency (CPPA).\u003C/ContentEditable>\n\u003CContentEditable  id=\"didnt-californians-already-have-a-right-to-erasure\" parent=\"\" tag=\"h2\" :articleId=\"1862\">Didn’t Californians already have a right to erasure?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Yes, California residents have a right to erasure under the CCPA. But, there are two problems when it comes to data brokers.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">First of all, it is unclear whether they can exercise that right against data brokers based on the wording of the CCPA. Second, assuming that they can, requesting data brokers to delete personal information would still be \u003Cstrong>difficult in practice\u003C/strong>. Many different brokers typically control information about a single consumer, and consumers typically do not know who these brokers are and how to contact them.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Long story short, the right to erasure introduced by the Delete Act is not new in California law, but the Act makes it much easier for consumers to exercise it against data brokers.\u003C/ContentEditable>\n\u003CContentEditable  id=\"how-does-the-delete-act-work\" parent=\"\" tag=\"h2\" :articleId=\"1862\">How does the Delete Act work?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The deletion system described by the Act will consist of a \u003Cstrong>unified registry for deletion requests\u003C/strong>. Data brokers must periodically access the system and review their databases to ensure they do not contain data about subjects who submitted a request.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Data brokers will also be under other obligations, such as documenting compliance with deletion requests and auditing the results of their procedures for honoring requests.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The Delete Act is vague about the system's technicalities and calls on the CPPA to iron out the kinks in its future regulation. According to the law, the system must be up and running by 2026 the latest. In all likelihood, planning the system will be no walk in the park for the CCPA- and implementing it will be no walk in the park for companies!\u003C/ContentEditable>\n\u003CContentEditable  id=\"how-is-the-delete-act-different-from-other-laws\" parent=\"\" tag=\"h2\" :articleId=\"1862\">How is the Delete Act different from other laws?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The Delete Act is an innovative law. Privacy laws such as the GDPR and California’s own CCPA frame the right to erasure as a matter between an individual and a specific company or organization. On the other hand, the Delete Act broadens the scope of a single request to all data brokers. This system differs from typical erasure requests and rather resembles a do-not-call registry of sorts.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The Delete Act also differs from other privacy laws in that requests also impact any data collected after the submission. A data broker cannot simply delete your data and call it a day; they must periodically review their database and erase any new data about you. \u003Cstrong>An ongoing process of review and erasure is required\u003C/strong>.\u003C/ContentEditable>\n\u003CContentEditable  id=\"who-does-the-act-apply-to\" parent=\"\" tag=\"h2\" :articleId=\"1862\">Who does the Act apply to?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">On one side of the equation, the Act applies to \u003Cstrong>California residents\u003C/strong>, much like the CCPA. No one else can submit a request under the Act.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">On the other side of the equation, the Act applies to data brokers. The law defines data brokers as any business that \u003Cstrong>knowingly collects and sells information of consumers with whom the business has no direct relationship\u003C/strong>. So, data brokers essentially act as intermediaries, acquiring personal information on consumers through a third party and selling it to another third party.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">It should be noted that the Act uses the same \u003Cstrong>broad definition of data sale\u003C/strong> as the CCPA/CPRA. The disclosure of consumer data in exchange for something valuable, will likely be considered as a sale, whether monetary payment is involved or not. This means that the Act may apply to many intermediaries in the advertising sector, depending on how regulators understand the definition.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">It is yet unclear whether the definition of data broker also covers businesses who buy or receive data from intermediaries- in other words, the \u003Cstrong>customers of data brokers\u003C/strong>. This yet unclear point is crucial, as many businesses (including smaller ones) enrich their customer data with third party information. Future regulation from the CCPA will hopefully clarify this.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">One thing is clear, though: much like the CCPA, the Delete Act will also apply to data brokers \u003Cstrong>outside California, and even outside the US.\u003C/strong>\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">On a side note, it is worth highlighting that California has a \u003Cstrong>registry for data brokers\u003C/strong>, and that registration was mandatory even before the Data Act. This could make enforcement easier, as the CCPA will know who the data brokers are and how to contact them.\u003C/ContentEditable>\n\u003CContentEditable  id=\"are-there-any-exemptions-to-the-delete-act\" parent=\"\" tag=\"h2\" :articleId=\"1862\">Are there any exemptions to the Delete Act?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Yes. Much like the CCPA, the Delete Act does not apply to companies that are bound by sector-specific regulation (such as the HIPAA for the health care sector).\u003C/ContentEditable>\n\u003CContentEditable  id=\"what-are-the-penalties-under-the-delete-act\" parent=\"\" tag=\"h2\" :articleId=\"1862\">What are the penalties under the Delete Act?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Data brokers can be fined \u003Cstrong>$200 for each day\u003C/strong> they fail to honor a deletion requests. Data brokers can also be fined under pre-existing California laws for failing to register themselves in the data broker registry.\u003C/ContentEditable>\n\u003CContentEditable  id=\"what-impact-will-the-delete-act-have\" parent=\"\" tag=\"h2\" :articleId=\"1862\">What impact will the Delete Act have?\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">The Delete Act will likely have a big impact on the advertising sector, and on other sectors heavily relying on data intermediaries (such as fraud detection). To comply with the law, companies must establish new procedures, and periodically review their databases to retrieve the data they need to delete.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">This will likely \u003Cstrong>increase legal and operation costs\u003C/strong> by no small amount. Additionally, it will require companies to implement \u003Cstrong>robust data governance\u003C/strong> practices, if they haven’t already, to make it easy to filter out databases and retrieve the information that needs to be deleted.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">Finally, it should be noted that data brokers need to \u003Cstrong>verify deletion requests\u003C/strong>. In other words, brokers need to make sure that consumers are who they say they are, and to find out exactly what personal information in their databases relates to them.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">This will be complicated because data brokers sometimes do not collect direct identifiers that would allow for easy verification. It would be wise for businesses to \u003Cstrong>establish robust verification procedures\u003C/strong> before the requests start coming in and to keep an eye on the CPPA for any guidance on verification.\u003C/ContentEditable>\n\u003CContentEditable  id=\"conclusion\" parent=\"\" tag=\"h2\" :articleId=\"1862\">Conclusion\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">It is early to say to what extent the Delete Act will impact the digital economy. However, it is clear that it will make compliance harder for data brokers. Companies covered by the Act should think ahead and immediately start preparing to meet its obligations.\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">\u003Cem>We are passionate about privacy. It is a human right, and one that is becoming more important with each day as the world becomes more and more interconnected.\u003C/em>\u003C/ContentEditable>\n\u003CContentEditable  parent=\"\" tag=\"p\" :articleId=\"1862\">\u003Cem>This is why we created Simple Analytics. Our privacy-first tool allows our customers to get all the insights they need in an ethical, privacy-friendly way. Simple Analytics delivers accurate insights without cookies, without trackers, and without collecting a single bit of personal data! If this sounds good to you, feel free to give us a try!\u003C/em>\u003C/ContentEditable>\n","On October 10, the State of California adopted the Delete Act, a new law that allows California residents to simultaneously require all data brokers to delete their personal information. The Act will likely deeply impact privacy practices inside and outside the State. So, let’s see what this law is all about!\n\n## What is the Delete Act?\nThe Delete Act is a new California law on the right to **have your data deleted from data brokers**. The Delete Act will be enforced by the California Privacy Protection Agency (CPPA).\n\n## Didn’t Californians already have a right to erasure?\nYes, California residents have a right to erasure under the CCPA. But, there are two problems when it comes to data brokers.\n\nFirst of all, it is unclear whether they can exercise that right against data brokers based on the wording of the CCPA. Second, assuming that they can, requesting data brokers to delete personal information would still be **difficult in practice**. Many different brokers typically control information about a single consumer, and consumers typically do not know who these brokers are and how to contact them.\n\nLong story short, the right to erasure introduced by the Delete Act is not new in California law, but the Act makes it much easier for consumers to exercise it against data brokers.\n\n## How does the Delete Act work?\nThe deletion system described by the Act will consist of a **unified registry for deletion requests**. Data brokers must periodically access the system and review their databases to ensure they do not contain data about subjects who submitted a request.\n\nData brokers will also be under other obligations, such as documenting compliance with deletion requests and auditing the results of their procedures for honoring requests.\n\nThe Delete Act is vague about the system's technicalities and calls on the CPPA to iron out the kinks in its future regulation. According to the law, the system must be up and running by 2026 the latest. In all likelihood, planning the system will be no walk in the park for the CCPA- and implementing it will be no walk in the park for companies!\n\n## How is the Delete Act different from other laws?\nThe Delete Act is an innovative law. Privacy laws such as the GDPR and California’s own CCPA frame the right to erasure as a matter between an individual and a specific company or organization. On the other hand, the Delete Act broadens the scope of a single request to all data brokers. This system differs from typical erasure requests and rather resembles a do-not-call registry of sorts.\n\nThe Delete Act also differs from other privacy laws in that requests also impact any data collected after the submission. A data broker cannot simply delete your data and call it a day; they must periodically review their database and erase any new data about you. **An ongoing process of review and erasure is required**.\n\n## Who does the Act apply to?\nOn one side of the equation, the Act applies to **California residents**, much like the CCPA. No one else can submit a request under the Act.\n\nOn the other side of the equation, the Act applies to data brokers. The law defines data brokers as any business that **knowingly collects and sells information of consumers with whom the business has no direct relationship**. So, data brokers essentially act as intermediaries, acquiring personal information on consumers through a third party and selling it to another third party.\n\nIt should be noted that the Act uses the same **broad definition of data sale** as the CCPA/CPRA. The disclosure of consumer data in exchange for something valuable, will likely be considered as a sale, whether monetary payment is involved or not. This means that the Act may apply to many intermediaries in the advertising sector, depending on how regulators understand the definition.\n\nIt is yet unclear whether the definition of data broker also covers businesses who buy or receive data from intermediaries- in other words, the **customers of data brokers**. This yet unclear point is crucial, as many businesses (including smaller ones) enrich their customer data with third party information. Future regulation from the CCPA will hopefully clarify this.\n\nOne thing is clear, though: much like the CCPA, the Delete Act will also apply to data brokers **outside California, and even outside the US.**\n\nOn a side note, it is worth highlighting that California has a **registry for data brokers**, and that registration was mandatory even before the Data Act. This could make enforcement easier, as the CCPA will know who the data brokers are and how to contact them.\n\n## Are there any exemptions to the Delete Act?\nYes. Much like the CCPA, the Delete Act does not apply to companies that are bound by sector-specific regulation (such as the HIPAA for the health care sector).\n\n## What are the penalties under the Delete Act?\nData brokers can be fined **$200 for each day** they fail to honor a deletion requests. Data brokers can also be fined under pre-existing California laws for failing to register themselves in the data broker registry.\n\n## What impact will the Delete Act have?\nThe Delete Act will likely have a big impact on the advertising sector, and on other sectors heavily relying on data intermediaries (such as fraud detection). To comply with the law, companies must establish new procedures, and periodically review their databases to retrieve the data they need to delete.\n\nThis will likely **increase legal and operation costs** by no small amount. Additionally, it will require companies to implement **robust data governance** practices, if they haven’t already, to make it easy to filter out databases and retrieve the information that needs to be deleted.\n\nFinally, it should be noted that data brokers need to **verify deletion requests**. In other words, brokers need to make sure that consumers are who they say they are, and to find out exactly what personal information in their databases relates to them.\n\nThis will be complicated because data brokers sometimes do not collect direct identifiers that would allow for easy verification. It would be wise for businesses to **establish robust verification procedures** before the requests start coming in and to keep an eye on the CPPA for any guidance on verification.\n\n## Conclusion\nIt is early to say to what extent the Delete Act will impact the digital economy. However, it is clear that it will make compliance harder for data brokers. Companies covered by the Act should think ahead and immediately start preparing to meet its obligations.\n\n_We are passionate about privacy. It is a human right, and one that is becoming more important with each day as the world becomes more and more interconnected._\n\n_This is why we created Simple Analytics. Our privacy-first tool allows our customers to get all the insights they need in an ethical, privacy-friendly way. Simple Analytics delivers accurate insights without cookies, without trackers, and without collecting a single bit of personal data! If this sounds good to you, feel free to give us a try!_",{"data":45},null,1862,"Delete Act: all you need to know","Learn what the new California law is about, and how it will impact businesses","delete_act","carlo-cilento","2023-10-25T10:14:30.650Z","2023-10-31T11:44:24.632Z",{"en":54,"de":55,"fr":57,"it":59,"es":61,"nl":63},{"slug":49},{"slug":56},"delete-act-alles-was-sie-wissen-muessen",{"slug":58},"suppression-de-la-loi-tout-ce-qu-il-faut-savoir",{"slug":60},"delete-act-tutto-quello-che-c-e-da-sapere",{"slug":62},"ley-de-supresion-todo-lo-que-debe-saber",{"slug":64},"delete-act-alles-wat-je-moet-weten"]