SB 923: Consumer privacy requests: deletion request records and request submission methods.

This bill expands the right to request deletion of personal information collected by a business. A consumer can request the deletion of all personal information collected, even if the business did not obtain it directly from the consumer. If the business did not obtain the information, it must retain a record of the request and the minimum data necessary to ensure the information is deleted. Businesses are required to make certain methods of communication available for consumers to submit personal information requests, including requests for deletion and correction. For online businesses with a direct relationship with the consumer, an email address must be provided for submitting requests. An online method, such as a web form or online portal, must also be available. The bill declares that its provisions further the purposes and intent of the California Privacy Rights Act of 2020.