California’s privacy regulator, CalPrivacy, has advanced new rules governing audits of data brokers’ compliance with the Delete Request and Opt-out Platform (DROP). The proposed rules would require independent audits every three years, examining deletion processes, records, systems, and employee practices. Meanwhile, the agency approved raising data broker registration and access fees to $9,500 in 2027 to cover growing operational costs. The developments signal stronger enforcement and oversight as California expands consumer data privacy protections.
