Guides

Your CCPA & CPRA Data Deletion Rights, Explained

2026-06-07 · byscento Privacy Team

California's privacy laws give you real, enforceable control over the personal information companies hold about you. Here's a plain-language summary of what you can demand - and how to actually use it. (This is general information, not legal advice.)

The core rights

Under the California Consumer Privacy Act (CCPA), as strengthened by the California Privacy Rights Act (CPRA), you can:

• Know what personal information a business has collected about you.
• Delete the personal information they hold about you.
• Opt out of the sale or sharing of your personal information.
• Correct inaccurate personal information.
• Limit the use of sensitive personal information.

Businesses generally must respond to a verifiable request within 45 days.

How this applies to data brokers

California also has a data-broker law: brokers must register with the California Privacy Protection Agency and publish how to opt out. The newer Delete Act is creating a single deletion mechanism (DROP) that will let you request deletion across registered brokers at once.

In the meantime, you exercise these rights broker-by-broker, by sending a deletion / opt-out request through each broker's stated channel.

Do you have to live in California?

The CCPA/CPRA technically protect California residents - but several other states (such as Colorado, Connecticut, Virginia, and Texas) now have similar consumer-privacy laws, and many brokers extend opt-out to everyone rather than maintaining separate processes. In practice, you can usually submit a request regardless of where you live.

Using an authorized agent

The law lets you designate an authorized agent to submit these requests on your behalf - which is exactly how a removal service operates. You sign a written authorization, and the agent sends the deletion and opt-out requests in your name. The broker may still verify your identity.

Putting it to work

1. Identify the brokers listing you (see our removal guides).
2. Send each a deletion + opt-out request citing the CCPA/CPRA.
3. Keep records, and re-check - brokers re-list over time.

If doing this across hundreds of brokers sounds like a lot, that's what byscento is for: we act as your authorized agent, submit the requests, and monitor continuously. See your exposure with a free scan.