Californians' data deletion requests, DROP, become enforceable Aug. 1

petilon•19 minutes ago

I hope other states adopt this. One of the biggest mistakes I have made is giving my real phone number to Dun & Bradstreet. Now the spam calls and messages (from people they sold my info to) won't stop. I don't want to change my phone number.

MrZander•23 minutes ago

Out of curiosity, does anyone know how this is enforceable for a company not based in California? Can CA fine a data broker that is based in another state but that is selling CA residents' information?

hackernud3s•30 minutes ago

What about unregistered data-brokers? I would he happy to sign up to webhooks for when someone wants to delete data.

Problem is though, you'd be revealing more data about them than I probably have by sending it.

igor47•42 minutes ago

I've been thinking of making a service which automatically sends deletion requests for all my service companies every month. Like, I currently keep a bunch of spyware features in my car turned of, but I have to keep location turned on to use the built in navigation which keeps track of range for me. Would be nice to have a ceiling on that data's retention.

Long term, if compliance with data deletion requests becomes a pain, maybe companies will finally give us an opt out of surveillance capitalism? Or maybe they'll just lock me out of my own car (I guess it's their car since I don't have root on it, lol)

echelon•27 minutes ago

Does this mean people can delete comments from HN?

aw1621107•17 minutes ago

Only if HN counts as a "data broker" under the corresponding law [0]. It states:

> “Data broker” means a business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship. “Data broker” does not include any of the following:

> An entity to the extent that it is covered by the federal Fair Credit Reporting Act (15 U.S.C. Sec. 1681 et seq.).

> An entity to the extent that it is covered by the Gramm-Leach-Bliley Act (Public Law 106-102) and implementing regulations.

> An entity to the extent that it is covered by the Insurance Information and Privacy Protection Act (Article 6.6 (commencing with Section 791) of Chapter 1 of Part 2 of Division 1 of the Insurance Code).

> An entity, or a business associate of a covered entity, to the extent their processing of personal information is exempt under Section 1798.146. For purposes of this paragraph, “business associate” and “covered entity” have the same meanings as defined in Section 1798.146 [1].

I don't think HN counts as a "data broker" under this definition since they state that they "do not collect any Personal Information unless you choose to provide your email address and/or information in the "about" field" for HN accounts and "do not sell or share your Personal Information (as those terms are defined under the CCPA)."

[0]: https://cppa.ca.gov/regulations/pdf/data_broker_reg_delete_a...

[1]: https://leginfo.legislature.ca.gov/faces/codes_displaySectio....

unstatusthequo•24 minutes ago

The Advertising ID field/ Nice of them to think of this, but it doesn't seem that I could actually get this from any of my Samsung TVs, Apple devices, apps?, etc? So while that field is nice and all, without transparency on getting the ad ID, those fields kind of do nothing.

amazingamazing•23 minutes ago

Why is there a time limit on deletion on this site?

Californians' data deletion requests, DROP, become enforceable Aug. 1

⚡ Community Insights

Discussion (8 Comments)Read Original on HackerNews