IAPP Privacy. Security. Risk. + AI Governance Global 2026

Seattle

6-9 October

Back to conference agenda

Accountability in the Data Economy: Regulating Data Brokers

Friday, 9 Oct.

13:00 - 14:00 PDT

Intermediate level

BREAKOUT SESSIONPRIVACYCOMPLIANCE TECHDATA SECURITYLAW AND REGULATIONPRIVACY-ENHANCING TECHNOLOGYGOVERNMENTTECHNOLOGYLEGAL

On 1 Jan. 2026, the California Privacy Protection Agency launched the Delete Request and Opt out Platform, a first of its kind system allowing Californians to request deletion of their personal information from hundreds of registered data brokers through a single submission. Beginning 1 Aug. 2026, data brokers must regularly access the platform and process these requests.

This panel brings together regulatory, legal, consumer and industry perspectives to explore how DROP is reshaping data broker accountability at scale. Panelists will discuss early lessons from launch, how businesses are adapting, how states are defining and regulating data brokers, and what this shift means for the broader data ecosystem.

The session will also examine how DROP changes the consumer experience by simplifying the exercise of privacy rights and raising expectations around data control.

What you will learn:

  • How DROP is reshaping compliance expectations and what early implementation reveals.
  • Trends in data broker regulation and where other jurisdictions are heading.
  • How these frameworks impact business incentives as well as consumer expectations.
  • Practical realities of implementing centralized deletion systems at scale. 

Moderator and speakers

headshot of Ben Isaacson

Ben Isaacson

CIPP/E, CIPP/US

Principal

In-House Privacy

generic profile silhouette

Marissa Rosemblat

Assistant Deputy Director of the Delete Act

California Privacy Protection Agency