California expanded the right to delete today

SB 923, signed September 27, 2026, extends the CCPA right to delete to data obtained from third parties and requires online-only businesses to offer a web form. It takes effect January 1, 2027.