Law / United States / 
California
Social Media Platforms Endangering Californians: account deletion (AB 656)
Cal. Civ. Code sections 3273.90 and 3273.91
In force since .
A data subject rights rule binding private bodies.
- Obligation class
- Data subject rights, Prohibition
As of .
What it requires
- If you operate a social media platform that generates more than $100,000,000 per year in gross revenues, provide a clear and conspicuous button labeled "Delete Account" as an immediately visible option in the platform's settings menu, in the application, on a browser or in any other format users use to access the platform (section 3273.91(a)).
- When a user clicks the button, give the user the steps to complete an account deletion request, which must include deletion of the user's personal information. If you seek verification, do it in a cost-effective and easy-to-use manner through preestablished two-factor authentication, email, text message, telephone call or message (section 3273.91(b)).
- Do not obstruct or interfere with a user's ability to delete their account, including by using dark patterns (section 3273.91(c)).
- Process the request as a request to delete personal information under section 1798.105 and the California Consumer Privacy Act, and do not treat a later login to the account as revoking the request (section 3273.91(d) and (e)).
These lines are LexLint's reading of the law's text, as of .
What this law does
Civil Code section 3273.91 requires a social media platform to provide a clear and conspicuous button that enables the user to delete their account. Under section 3273.90(d) of the Civil Code, a social media platform is one that generates more than $100,000,000 per year in gross revenues. Section 3273.91(c) bars a social media platform from obstructing or interfering with a user's ability to delete their account, including by using dark patterns.
Under section 3273.91(d), a deletion request counts as a request to delete the user's personal information under section 1798.105 of the Civil Code and is processed under the California Consumer Privacy Act. Civil Code section 3273.91 took effect on .
When LexLint raises it
When your app profile says your app operates a social platform.