CCPA/CPRA · Kalifornien
CCPA §1798.105 Agent
Consumers' Right to Delete Personal Information. Konsumenten får begära att företaget raderar personuppgifter som samlats in från konsumenten. Företaget ska radera, meddela tjänsteleverantörer och tredje parter, och får bara behålla uppgifter enligt de uttryckliga undantagen.
Vad måste företaget göra?
§1798.105(a) Right to request deletion
A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.
§1798.105(b) Disclose the right to delete
A business that collects personal information about consumers shall disclose, pursuant to Section 1798.130, the consumer's rights to request the deletion of the consumer's personal information.
§1798.105(c)(1) Delete and notify service providers, contractors and third parties
A business that receives a verifiable consumer request from a consumer to delete the consumer's personal information pursuant to subdivision (a) of this section shall delete the consumer's personal information from its records, notify any service providers or contractors to delete the consumer's personal information from their records, and notify all third parties to whom the business has sold or shared the personal information to delete the consumer's personal information unless this proves impossible or involves disproportionate effort.
§1798.105(c)(2) Confidential record of deletion requests
The business may maintain a confidential record of deletion requests solely for the purpose of preventing the personal information of a consumer who has submitted a deletion request from being sold, for compliance with laws or for other purposes, solely to the extent permissible under this title.
§1798.105(c)(3) Service providers and contractors cooperate
A service provider or contractor shall cooperate with the business in responding to a verifiable consumer request, and at the direction of the business, shall delete, or enable the business to delete and shall notify any of its own service providers or contractors to delete personal information about the consumer collected, used, processed, or retained by the service provider or the contractor. (Excerpt; full text in the official statute.)
§1798.105(d) Exceptions to deletion
A business, or a service provider or contractor acting pursuant to its contract with the business, another service provider, or another contractor, shall not be required to comply with a consumer's request to delete the consumer's personal information if it is reasonably necessary for the business, service provider, or contractor to maintain the consumer's personal information in order to: (1) complete the transaction or provide the good or service; (2) help to ensure security and integrity; (3) debug to identify and repair errors; (4) exercise free speech or another legal right; (5) comply with the California Electronic Communications Privacy Act; (6) engage in public interest research; (7) comply with a legal obligation. (Paraphrased list; verbatim items in the official statute.)
Sanktion
§1798.155(a): högst USD 2,500 per överträdelse, USD 7,500 vid uppsåt eller när det gäller konsumenter under 16 år. Beloppen indexjusteras enligt §1798.199.95(d).
Tillsynsfall med officiell källa (0)
Inget tillsynsfall med officiell källa som gäller just denna paragraf finns i registret ännu (not_in_register).
- Agent:
- agent:us:ccpa:agent-sec-1798-105
- Källa:
- Cal. Civ. Code §1798.105, läst 2026-10-10
Krav på att radera hela AI-modeller (algorithmic disgorgement) kommer från amerikanska FTC-ärenden, inte från CCPA. Kopplingar mellan fall, krav och kontroller finns i NovaCopilot med partnernyckel. Source: NovaCopilot.