Cal. Civ. Code § 1798.105
Right to delete personal information (CCPA)
In plain English
A California consumer may ask a covered business to delete personal information the business collected from them. The business must delete it and tell its service providers and contractors to delete it too, unless an exception applies. It is a right to request deletion, not a guarantee that everything will be deleted — the statute lists exceptions.
Relevant provisions
- § 1798.105(a) — consumer right to request deletion
- § 1798.105(c) — business must delete and direct service providers/contractors to delete
- § 1798.105(d) — exceptions (e.g. completing a transaction, security, legal compliance)
Applicability and limits
Applies to businesses that meet the CCPA's coverage thresholds and to personal information the business collected from the consumer. Exceptions in § 1798.105(d) can preserve data (for example to complete a transaction or meet a legal obligation). Use of the DROP mechanism is a separate, Delete-Act-based route limited to registered California data brokers.
This reference exists so a reader can go straight to the operative provision rather than a whole code title. Always read the statute and the implementing regulations together.
Official source
- Cal. Civ. Code § 1798.105 ↗Primary authorityhttps://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV§ionNum=1798.105
Verification: Citation and canonical Legislative Counsel URL supplied. The official database blocked automated retrieval of the section text from this environment (HTTP 403), so the wording here was NOT machine-verified against leginfo on this date. Treat as a pointer for human inspection.
Related authorities
- Right to opt out of sale or sharing (CCPA) — Cal. Civ. Code § 1798.120
- The Delete Act and the DROP deletion platform — Cal. Civ. Code §§ 1798.99.80 et seq. (Delete Act)