CPPA_Data_Broker_Deletion_DBD_RFI_CPPA24-0001.zip

This document is a Request for Information (RFI) issued by the California Privacy Protection Agency (CPPA) for an Accessible Deletion Mechanism Software solution. The CPPA is seeking to build an online deletion mechanism that allows California consumers to submit a single verifiable request to instruct every registered data broker to delete any personal information the consumer has with those brokers. The solution must support the CPPA's enforcement role by providing monitoring and reporting capabilities of data brokers' compliance with the deletion requirements. Data brokers will be required to access the online mechanism every 45 days to review and process consumer deletion requests. The CPPA is requesting information from potential vendors on their capability to provide this software solution, with responses due by August 1, 2023.

The RFI does not provide pricing details or specify set-asides. It indicates the CPPA will be the sole administrator of the deletion mechanism, suggesting there is no incumbent provider. The solution is being developed to support the CPPA's responsibilities under the California Consumer Privacy Act, as amended by Senate Bill 362 (the "Delete Act"), with funding and requirements stemming from that legislation.