California residents can now use a newly activated online tool called the Delete Requests and Opt-Out Platform (DROP) to send a single verified request to over 500 registered data brokers requiring them to delete personal information the brokers collect and sell online. The DROP system, launched January 1, 2026, is part of the California Delete Act enacted in 2023, and replaces the older cumbersome process of individually opting out with each broker — previously required under earlier privacy laws such as the California Consumer Privacy Act. Residents must verify their California residency and submit basic identifying information, after which brokers are legally obligated to begin processing deletion requests by August 1, 2026, with a 90-day window to complete them. While first-party data and some public or exempt records are not covered, the initiative is intended to reduce spam calls, mitigate identity-theft risks, and give residents greater control over their digital footprints. The California Privacy Protection Agency will oversee compliance and enforce penalties if brokers fail to comply.
Sources:
https://techcrunch.com/2026/01/03/california-residents-can-use-new-tool-to-demand-brokers-delete-their-personal-data/
https://abc7.com/post/new-drop-privacy-tool-helps-california-residents-stop-data-brokers-selling-personal-information/18340148/
https://www.kcra.com/article/california-residents-delete-personal-data-online-drop/69899586
Key Takeaways
- Centralized data deletion: DROP lets Californians send one verified request to compel deletion of personal data from all registered data brokers rather than dealing with each company individually.
- Legal obligations and timeline: Brokers must start processing requests by August 1, 2026, and have 90 days to comply under the California Delete Act, with enforcement by the California Privacy Protection Agency.
- Limited coverage, meaningful control: While not all types of data are covered (e.g., first-party or public records), the platform significantly strengthens consumer control over sensitive personal information.
In-Depth
California has taken a decisive step in privacy protection by rolling out the Delete Request and Opt-Out Platform (DROP) as of January 1, 2026. This new tool, mandated by the California Delete Act of 2023, gives millions of state residents a single, streamlined way to require data brokers to delete their personal information. Historically, Californians had to navigate a fragmented and difficult opt-out landscape, contacting each broker individually to demand deletion under earlier privacy laws. DROP eliminates that inefficiency by allowing a single verified submission that goes to more than 500 data brokers registered with the state.
To use DROP, residents must verify they live in California and provide basic identity information — such as name and address — before submitting their deletion request. Once submitted, data brokers are legally obligated under state law to begin processing those requests starting August 1, 2026, with a 90-day window to act on them. Failure to comply could trigger enforcement action from the California Privacy Protection Agency. While some data, such as first-party records or public documents like vehicle registrations, remains outside the scope of deletion requests, the broader goal is to reduce the amount of personal information circulating in marketing and data-resale ecosystems.
The launch of DROP reflects California’s ambition to make privacy rights more enforceable and consumer-friendly. It also places real legal teeth behind data deletion requests, moving beyond voluntary opt-out procedures toward a structured compliance regime for brokers. For residents concerned about unwanted solicitations, identity theft, and the opaque sale of personal data, DROP offers a powerful new mechanism to reclaim control over their information. The California model may well influence future privacy frameworks in other states and at the federal level.