Six states now require registration, and each one sets its own fee, window and renewal date. Two of them open for the first time in 2027, and three of the four already running change that year. Figures below are current as of 7 September 2026.
Delete Act
$6,000 a year, rising to $9,500 for 2027
Register 1 to 31 January
The only state running a central deletion system today. Registered brokers have had to process deletion requests on a 45 day cycle since 1 August 2026.
Business & Commerce Code Ch. 509, broadened by SB 2121 in 2025
$300 a year
Rolling
The 2025 change widened who counts: more than half your revenue from data, or data on more than 50,000 individuals. Many companies pulled in by that revision have not noticed.
HB 2052, mandatory since 2024
$600 a year
Renew by 31 December
Registration is with the Department of Consumer and Business Services rather than the Attorney General.
Registry in place since 2019
Registration fee, plus a $20,000 bond from 1 January 2027
Annual
The 2027 amendments add the bond and credentialing of purchasers, and commission a study of a California style deletion mechanism.
Connecticut Data Privacy Act amendments
$2,500 a year
From 1 January 2027
Connecticut then runs its own central deletion system. It goes live 1 July 2028, and broker obligations start on a 45 day cycle from 1 October 2028.
P.L.2026 c.25, signed 30 June 2026
Tiered by size
First window 1 April to 30 June 2027
The widest definition of the six. It covers data collectors with direct consumer relationships too, so it catches companies that are out of scope everywhere else.
California's fee rises, Vermont adds its bond, and Connecticut and New Jersey both open for the first time. A company registered in four states pays materially more next year than this one, before any tooling, and the windows do not line up with each other. Missing one is its own penalty, separate from anything to do with deletion requests.