California Delete Act Data Broker Friction Audit

Statutory Grounding (SB 362 / Cal. Civ. Code § 1798.99.80 et seq.): California's Delete Act mandates that data brokers provide accessible deletion mechanisms, annually disclose request metrics, and integrate with the California Privacy Protection Agency (CPPA) centralized deletion mechanism. A landmark empirical audit led by Jennifer King (Stanford HAI) and the Stanford RegLab uncovered that the vast majority of registered brokers employ deliberate friction loops, omit mandatory annual metrics, or demand excessive identity verification.

1. Data Broker Profile & Practice Selection

Interactive Audit

Broker Archetype Preset

Broker Legal Entity Name

CPPA Registry & Reporting Status

Formally Registered on CPPA Registry (§ 1798.99.82) Publishes Annual Deletion Request Metrics (§ 1798.99.85)

Observed Consumer Friction Tactics (Stanford HAI Empirical Taxonomies)

CPPA Enforcement Standard Reference

Under SB 362, data brokers face penalties of $200/day for failure to register, plus statutory fees and mandatory compliance orders. Dark patterns that impair consumer autonomy or require disproportionate identity proofs to delete previously unverified scraped data constitute violations of Cal. Civ. Code § 1798.185.

2. Compliance Score & Journey Simulation

Live Evaluation

Consumer Deletion Journey Flow Tester

Step-by-step rendering of what an ordinary Californian experiences when attempting to exercise Delete Act rights at this broker:

Statutory Disclosure Audit

Reporting Obligation	Observed Status	Delete Act Mandate

Policy Solution: Stanford HAI Centralized Single-Request Impact

When the CPPA Accessible Deletion Mechanism (SB 362 DROP platform) is fully enacted, all 3 active broker-side obstructions will be bypassed entirely via an authenticated single-registry signal.