How Do I Make a Request to Delete?

To exercise your Right to Delete under the CCPA, make a Request to Delete.

When you submit a Request to Delete to a business that has collected, stored, shared, and sold your personal information, that business must permanently delete any and all personal information that they have gathered directly from you.

Although the CCPA grants you, a California consumer, the Right to Delete any and all personal information that a business may have about you, there are a few reasons why a business may not be obligated to fulfill your Request to Delete.

When Should I expect a Response to My Request to Delete?

After you have submitted your Request to Delete to a business you should expect a response within ten (10) calendar days. This first response would acknowledge the receipt of your request, and, in some cases, may also request additional information from you, in order to verify your identity.

In total, you should expect your Request to Delete to be processed and fulfilled within 45 calendar days from the date of your request. Once per request, however, a business may extend this deadline for another 45 days, provided that the business has clearly notified you of this extension and the reason for it. If a business extends the deadline, your Request to Delete may take up to 90 days to be processed and fulfilled.

Why Are They Asking for My Personal Information?

Businesses may ask you for additional information in order to process your Request to Delete. This information is used by the business to confirm that you are a California resident and to ensure that you are, in fact, the person making the request.

The identity verification process is especially important when a request to delete includes sensitive information such as family photos or medical documents. Consequently, if a business is unable to verify your identity, they may lawfully deny your Request to Delete.

Related: What Are My Rights Under the CCPA? / Can A Business Deny My Privacy Request?