SB584:

Consumer Data Protection Act; personal data obtained from source other than the consumer.

Bill Summary:

Consumer Data Protection Act; personal data
obtained from source other than the consumer. Provides that if
a controller has obtained personal data about a consumer from a source
other than the consumer, the controller may comply with such consumer's
request to delete such personal data by opting the consumer out of
the processing of such personal data for targeted advertising, sale,
or profiling. The provisions of the bill become effective on January
1, 2023.