California's data and privacy laws aren't being followed

Summary

This Marketplace Tech episode has Megan McCarty-Carino interview Jennifer King of the Stanford Institute for Human-Centered AI about a Stanford report on whether registered data brokers are following California privacy law. It extends the wiki’s California Delete Act, DROP/DROPS, and Consumer Data Deletion branch by shifting from the promise of a centralized deletion tool to the Data Broker Compliance Gap around friction, missing statistics, and enforcement capacity.

The main synthesis is that privacy rights need operational compliance as much as legal text. King says only 9% of registered data brokers were compliant, describes extra captchas and unnecessary data requests as friction in deletion workflows, and argues that a private right of action could complement CalPrivacy enforcement. The episode also connects broker registries to AI Data Broker Demand because California now asks brokers to disclose whether they sell data to generative AI developers.

Key Claims

• California has unusually strong consumer privacy protections, but the episode says registered data brokers are largely ignoring important obligations.
• Jennifer King says only 9% of registered data brokers were compliant with the law in the Stanford report.
• Some brokers allegedly add friction to consumer-rights processes through extra captchas, unnecessary data requests, hard-to-submit forms, or failure to report required statistics.
• CalPrivacy has fined some brokers that failed to register, but King says the practices highlighted by the Stanford report have not yet been publicly investigated.
• The DROPS system centralizes deletion requests so consumers do not have to contact data brokers one by one.
• Brokers must check DROPS every 45 days, and King says more than 450,000 people had registered after sign-ups began in January.
• King recommends adding a private right of action because agency resources are limited and class actions could enforce privacy rights at larger scale.
• The broker registry now asks whether brokers sell data to generative AI developers, making AI monetization and ad targeting part of the consumer-data question.

Key Quotes

“9%” - King’s compliance figure for registered data brokers in the Stanford report.

“game changer” - King’s description of the centralized DROPS deletion system.

Connections

• Marketplace Tech, Megan McCarty-Carino, Jennifer King, and Stanford HAI - show, host, guest, and report affiliation.
• California, CalPrivacy, California Delete Act, and DROPS - jurisdiction, regulator, law, and deletion system.
• Consumer Data Deletion and Data Broker Compliance Gap - consumer-rights mechanism and compliance failure this episode extends.
• AI Data Broker Demand and AI Advertising Targeting - generative-AI and ad-targeting branch raised by broker disclosures.
• Platform Data Regulation, Data Broker Loophole, and Comprehensive Consumer Data Privacy - broader data-governance context.

Contradictions

• No settled contradiction found with existing wiki content.
• The source qualifies California’s one-stop shop for data brokers to delete consumers’ data by showing that the same California deletion architecture can be legally ambitious yet operationally weak if brokers ignore registration, reporting, or request-process requirements.
• The episode uses “DROPS” where the March source and existing wiki page use DROP. This is treated as a naming variant for the same centralized California deletion system rather than a substantive conflict.