California DROP for Data Brokers
DROP is California's centralized mechanism for consumers to submit a single deletion request that reaches registered data brokers. This page covers the operational shape of that obligation.
What DROP is
The Delete Request and Opt-Out Platform (DROP) is the state-operated mechanism created under California's Delete Act. A consumer submits one verified deletion request, and registered data brokers are expected to access the platform, retrieve the applicable deletion information, and act on records that match.
Beginning August 1, 2026, registered data brokers must access DROP at least once every 45 calendar days and process deletion requests.
The operational shape of the obligation
- Establish and maintain a DROP account with the required registration and access steps completed.
- Select the deletion list types that correspond to the identifiers you actually hold.
- Standardize and hash your own identifiers so they can be compared against the list values.
- Match records, take the required internal action, and record the outcome.
- Report processing status back through the platform, including amendments where applicable.
- Maintain ongoing handling so newly collected matching records are not later sold or shared.
Treat DROP as a recurring operations program with a named owner and a calendar, not a one-time engineering project. The 45-day cadence is the design constraint that shapes everything else.
Who this affects
The obligations attach to businesses that meet California's statutory data broker definition — broadly, businesses that knowingly collect and sell to third parties the personal information of consumers with whom they do not have a direct relationship. Whether a specific organization falls inside that definition is a legal question.
Whether your organization is treated as a data broker, and which of your data flows count as a sale or sharing, should be confirmed with qualified counsel before you scope implementation work.
This page describes CA DROP Broker's operational reading of publicly available California materials. Verify current requirements against official CalPrivacy sources and with qualified counsel.