Cybersecurity & Tech Surveillance & Privacy

Lawfare Daily: CPPA’s Tom Kemp on Data Brokers, Privacy, and State Enforcement

Justin Sherman, Tom Kemp, Jen Patja
Wednesday, March 25, 2026, 7:00 AM
 Breaking down California’s new Delete Request and Opt-out Platform.

Tom Kemp, executive director of the California Privacy Protection Agency (CPPA), joins Lawfare’s Justin Sherman to discuss California’s new Delete Request and Opt-out Platform, or DROP system, the data broker industry, and California’s ongoing efforts to ensure residents can effectuate their privacy rights. They also discuss the process and impacts of bringing technologists into public service at privacy and cybersecurity regulatory bodies, inter-state collaboration on data privacy issues, how California thinks about concerns around U.S. foreign adversaries and risks of access to U.S. persons’ data, and the near-term and over-the-horizon privacy risks to consumers.

Additional Resources:

To receive ad-free podcasts, become a Lawfare Material Supporter at www.patreon.com/lawfare. You can also support Lawfare by making a one-time donation at https://givebutter.com/lawfare-institute.


Justin Sherman is a contributing editor at Lawfare. He is also the founder and CEO of Global Cyber Strategies, a Washington, DC-based research and advisory firm; the scholar in residence at the Electronic Privacy Information Center; and a nonresident senior fellow at the Atlantic Council.
Tom Kemp is the executive director of the California Privacy Protection Agency
Jen Patja is the editor of the Lawfare Podcast and Rational Security, and serves as Lawfare’s Director of Audience Engagement. Previously, she was Co-Executive Director of Virginia Civics and Deputy Director of the Center for the Constitution at James Madison's Montpelier, where she worked to deepen public understanding of constitutional democracy and inspire meaningful civic participation.
}

Subscribe to Lawfare