California has launched an online platform allowing residents to request that registered data brokers delete their personal information.
The Delete Requests and Opt-Out Platform (DROP), now live, enables users to submit a single data deletion request covering all current and future data brokers registered with the state. Users must verify their California residency to begin the process.
The tool supports a 2023 law known as the Delete Act, which aimed to simplify prior requirements that residents submit deletion requests individually to each company. More than 500 data brokers are registered with the state.
Data brokers are scheduled to begin processing these requests in August 2026. They will have 90 days to act on requests and report back to the state. If a broker is unable to locate a user’s data, individuals may submit additional information to assist.
The requirements apply only to third-party brokers that buy or sell data and do not affect companies’ use of first-party data collected directly from users. Publicly available information such as voter records and sensitive data regulated under laws like the Health Insurance Portability and Accountability Act (HIPAA) is exempt.
The California Privacy Protection Agency said the tool gives residents more control over their data and could help reduce unsolicited messages and the risks associated with fraud or data breaches.
Brokers who fail to register or comply with valid deletion requests are subject to a $200 daily penalty plus enforcement costs, according to the agency.
