What is a CCPA Data Deletion Request?

Lawrence Bonk Profile image

Written by:

Updated January 6, 2023

If you are new to the world of online privacy, you may wonder what is CCPA data deletion request. Many of the best websites and online shopping platforms have adopted a number of practices that could impact consumer privacy, which is where the CCPA comes in. So what is the CCPA, what is a data deletion request, and how does this help consumers? Keep reading to find out.


  • CCPA stands for the California Consumer Privacy Act and is a robust piece of legislation to protect consumers from privacy violations via privacy policies.
  • Within this statute, consumers may petition companies for a data deletion request of personal information for business purposes or personal reasons.
  • Companies have 45 days to comply with this legal obligation once the consumer has created a verifiable consumer request via email address.

And once you finish this, check out are computer cookies bad, what the CCPA considers sensitive data, what the CCPA breach notification is, what the CCPA email address is, and how to delete cookies from your computer.

Insider Tip

Businesses have 45 days to respond to a verifiable request for data deletion under the CCPA.

What is the CCPA?

CCPA stands for the California Consumer Privacy Act, which is a comprehensive online privacy initiative that primarily benefits California citizens but extends to people who use online services founded by California-based entities. This act, and the associated regulatory agency, keep an eye on Internet privacy to help consumer experience. The act was passed in 2018 and created a number of rights for Internet users, such as the right to know about the personal information that is collected and the right to have sensitive data deleted upon request.

What is a Data Deletion Request?

Under the CCPA, businesses must delete a consumer’s personal data if the consumer makes a verified request to do so. This is called a data deletion request. Once requested, the business is legally required to delete the specified personal information from its data stores and direct any affiliated service providers to do the same. The organization has a pre-specified period of time to complete this request.

What Businesses Must Comply?

The CCPA is a rather robust piece of legislation, but not every business under its purview must comply with data deletion requests. First of all, the business must provide service to Californians. Beyond that, there are some other rules and regulations.

Gross Revenue

These regulations are for large business entities and not small mom-and-pop shops. Companies must have annual gross revenues in excess of $25 million in order to be forced to comply with CCPA data deletion requests. When it comes to large retailers and tech giants, this is not a difficult threshold to pass.

STAT: Businesses are required to give consumers certain notices explaining their privacy practices. The CCPA applies to many businesses, including data brokers. (source)

Customer Base

In addition to the revenue figure listed above, companies must handle a certain amount of personal information to be forced to comply with data deletion requests. Simply put, companies must already have the personal information of over 50,000 consumers or devices and derive at least 50 percent of their annual revenue from selling this personal information.

CCPA Data Deletion FAQs

How do you ask a company to delete your personal data?

CCPA requests, such as a request for deletion, are filed via online forms per CCPA rights. Be careful not to issue numerous repetitive requests.

How do you submit a data deletion request?

This is done by reaching out to the service provider or the business entity impacted by these privacy policies via an online form. Make sure to have your personal information available, such as your social security number.

What if I don’t live in California?

Companies and service providers only have to honor email address requests by California residents, but some companies are honoring these privacy laws and privacy policies nationwide.
Lawrence Bonk Profile image