Privacy & Cybersecurity Law Blog

California recently enacted California Assembly Bill 656 (the “Act”), which requires social media platforms to make it easier and more straightforward for users to delete their social media accounts and personal information. The Act applies to social media platforms that generate more than $100 million in annual gross revenues.  

Key provisions of the Act include:

• Conspicuous Account Deletion Button. Social media platforms must display a clearly visible and accessible account deletion button labeled “Delete Account” in the platform’s settings menu. Once a user clicks the “Delete Account” button, the social media platform must provide the steps necessary to complete the account deletion request, which must also include the deletion of the user’s personal information.
• Easy-to-Use Verification Method. The Act specifies that if a social media platform requires verification of the account deletion request (e.g., through two-factor authentication, email, SMS message), such verification must be easy-to-use and cost-effective.  
• CCPA Deletion Request. An account deletion request must be treated as a request to delete under the California Consumer Privacy Act (CCPA) and processed in accordance with the CCPA’s requirements (e.g., within 45 days, flowed down to service providers).
• No Obstruction or Interference. Social media platforms may not use confusing designs, including dark patterns, to obstruct or interfere with users’ ability to delete their accounts and personal information.
• Subsequent Login Does Not Revoke the Request. User login after an account deletion request does not revoke or cancel the deletion request.

The Act takes effect on January 1, 2026.