EPIC Backs CPPA’s Efforts to Strengthen Data Broker Registry

EPIC submitted comments to the California Privacy Protection Agency this week in support of proposed improvements to the state’s data broker registry. The CPPA’s new rules are a significant step towards reining in the data broker industry, which has long thrived on the overcollection of personal information, harmful consumer profiling, and a lack of oversight. The regulations, proposed under California’s Delete Act, would clarify brokers’ obligations under the Act and establish consumer-friendly definitions for terms like reproductive health care data. EPIC urged the Agency to require that the registry include an individual point of contact for each company, giving consumers an easier way to follow up with brokers that fail to honor their access, correction, or deletion requests. EPIC works to limit the harmful practices of data brokers and has worked with the CPPA to enact the strongest possible privacy protections for Californians.