Support for the Expanding Privacy Rights Act (SB 923)

Dear Rob Bonta, On September 27, 2026, Governor Gavin Newsom signed the Expanding Privacy Rights Act (SB 923), which closes a loophole in the California Consumer Privacy Act (CCPA). Previously, businesses could retain personal information obtained from third parties even after a consumer requested deletion. The new law mandates that all personal information be deleted upon request, regardless of its source. Additionally, online-only businesses must provide an online submission method for privacy requests. This law takes effect on January 1, 2027, and it represents a significant step toward strengthening consumer privacy rights in California. As a resident of Santa Barbara who pays taxes here, I recognize how important it is for our state to protect the personal information of its residents. People deserve to have control over their data and to know that their privacy rights are being upheld. It's crucial that our government officials support laws that enhance transparency and accountability in how businesses handle personal information. Can you please share your position on SB 923 and what actions you intend to take to ensure its successful implementation? Your support for this legislation is vital to restoring trust and security for consumers in California. Sincerely, Eric Rosenfeld