Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
AI Summary
SB1106 amends privacy laws to enhance consumer privacy by requiring data brokers to process deletion requests, with specific timelines and conditions.
Business Impact
If you operate as a data broker in California, you must process consumer deletion requests every 30 days starting August 1, 2026, or face penalties.
What do these statuses mean? ▼
Introduced
— Filed in the legislature; not yet heard in committee
In Committee
— Assigned to and being reviewed by a legislative committee
Passed
— Approved by one or both chambers; awaiting further action
Signed / Enacted
— Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed
— Vetoed, failed to pass, or session expired without action
Unknown
— Status data not yet available or awaiting classification
Affected Industries
What This Means
Senate Bill 1106 aims to enhance consumer privacy by amending existing laws governing data brokers in California. It emphasizes the importance of timely data management and consumer rights, with specific conditions for deletion requests.
Key Provisions
- Data brokers must maintain reasonable security procedures for personal information.
Latest Legislative Action
In Assembly. Read first time. Held at Desk.
Bill Sponsors
| Name | Role | District |
|---|---|---|
| Christopher Cabaldon D | Sponsor | SD-003 |
Roll Call Votes
S ·
Senate 3rd Reading SB1106 Cabaldon ·
May 19, 2026
39 Yea
0 Nay
1 Other
Passed ✓
S ·
Do pass ·
Apr 20, 2026
5 Yea
0 Nay
2 Other
Passed ✓
S ·
Do pass, but first be re-referred to the Committee on [Appropriations] ·
Apr 6, 2026
8 Yea
0 Nay
1 Other
Passed ✓
Compliance Checklist
Process consumer deletion requests every 30 days.
Who: Data brokers operating in California.
Deadline: By August 1, 2026.
Penalty: Potential penalties for non-compliance.
Who: Data brokers operating in California.
Deadline: By August 1, 2026.
Penalty: Potential penalties for non-compliance.
Establish reasonable security procedures for consumer data.
Who: Data brokers.
Deadline: By August 1, 2026.
Penalty: Potential penalties for non-compliance.
Who: Data brokers.
Deadline: By August 1, 2026.
Penalty: Potential penalties for non-compliance.
Full Legal Analysis
Senate Bill 1106 amends Section 1798.99.86 of the California Civil Code, focusing on the responsibilities of data brokers regarding consumer data deletion requests. The bill's compliance start date is not specified here. The bill outlines conditions under which data brokers must process deletion requests, but does not confirm a single request mechanism for all brokers or selective exclusion of specific brokers. It does not specify penalties for non-compliance but focuses on compliance mechanisms and requirements for data brokers. Data brokers are required to process deletion requests unless certain conditions apply, such as the necessity to maintain data for specific purposes. The bill emphasizes the need for reasonable security measures to protect consumer data during this process. Overall, SB1106 aligns with broader trends in data privacy legislation, reflecting increasing consumer demand for transparency and control over personal information.
Official Source
Official Bill Text
View SB1106 on official legislature website →
Affected Industries
More California AI Legislation
SB1119
Companion chatbots: children’s safety.
High
SB947
Employment: automated decision systems.
High
SB1000
California AI Transparency Act.
High
SB903
Mental health professionals: artificial intelligence.
High
SB 903
Mental health professionals: artificial intelligence.
Medium
AB2545
Report: labor force impact: artificial intelligence.
Medium
View All CA Laws →
More California AI Laws
Browse all published AI bills and regulations for California.