IAPP Privacy. Security. Risk. + AI Governance Global 2026
Seattle
6-9 October
Accountability in the Data Economy: Regulating Data Brokers
Friday, 9 Oct.
13:00 - 14:00 PDT
Intermediate level
On 1 Jan. 2026, the California Privacy Protection Agency launched the Delete Request and Opt out Platform, a first of its kind system allowing Californians to request deletion of their personal information from hundreds of registered data brokers through a single submission. Beginning 1 Aug. 2026, data brokers must regularly access the platform and process these requests.
This panel brings together regulatory, legal, consumer and industry perspectives to explore how DROP is reshaping data broker accountability at scale. Panelists will discuss early lessons from launch, how businesses are adapting, how states are defining and regulating data brokers, and what this shift means for the broader data ecosystem.
The session will also examine how DROP changes the consumer experience by simplifying the exercise of privacy rights and raising expectations around data control.
What you will learn:
- How DROP is reshaping compliance expectations and what early implementation reveals.
- Trends in data broker regulation and where other jurisdictions are heading.
- How these frameworks impact business incentives as well as consumer expectations.
- Practical realities of implementing centralized deletion systems at scale.Â
Moderator and speakers

Ben Isaacson
CIPP/E, CIPP/US
Principal
In-House Privacy

Marissa Rosemblat
Assistant Deputy Director of the Delete Act
California Privacy Protection Agency